SBI cards Hiring For Vice President- Security Operations lead at India Full Time

Security Solution design and implementation

• Design & develop strong, sustainable, and highly secure solution to protect the Organisation asset.
• brainstorming with EEM and vendor to prose and design the security solution.
• project management throughout project life cycle.
• Security operation support for implemented solution.

IT Security Operations

• Manage security solution, like NIPS, APT, Anti-Virus, WAF, NAC, Proxy, EDR etc.
• Responsible for high uptime for all security solution and their management.
• Manage & maintain the SLAs, operation metrics & support ongoing maintenance activities.
• Manages security incident, problem and change management.
• Work with application and other stakeholder to enhance application security.
• Work with Infosec, Compliance, legal team to work on day-to-day security related task.

Vulnerability management

• Responsible for OS, Non-OS, vulnerability management.
• Responsible for VA/PT assessment, mitigation, and management.
• Responsible for 98% compliance with respect to Vulnerability management.
• Co-ordination with all IT team/Leads to get maintenance window, pre and post sanity of weekly and monthly basis.

Risk Management

• Accountable to prepare and assess risk matrix, Risk framework and residual risk from IT side.
• Responsible of Security KPIs against network solution, vulnerability management and Risk.
• Actively work with Infosec team and their team to evaluate any security risk with respect to Data, Network, Asset, application etc.
• Responsible to present the security incident related reports.

Auditing and compliance requirements

• Responsible to work along with Infosec team to conduct PCI-DSS, ISO 27001 etc and related internal or external auditing.
• Responsible to work on RED team and Blue team security assessment and mitigation on the finding.
• Manage compliance requirement on external & internal audit on IT vertical
• Implementation for security hardening configuration on all IT devices which include compute, Network, and servers.
• Manage the compliance, IT security policy adherence, user access control etc.