Cyber Security Expert

MJ Biopharm; Pune District; On-site; INR 2,500,000 - 3,800,000; Full time

Job summary

MJ Biopharm is seeking a senior cybersecurity leader to define and implement the organization's security strategy, align security with business goals, and establish robust policies and governance. The role will drive risk assessment, incident response, vulnerability management, IAM controls, data protection, and secure cloud and application architecture.

The candidate will lead security monitoring, threat detection, and cross-functional coordination with IT, legal, and other stakeholders to

Responsibilities

• Define and implement the organization's cybersecurity strategy.
• Align security objectives with business and IT goals.
• Establish security policies, standards, and procedures.
• Identify and assess cybersecurity risks.
• Maintain a cybersecurity risk register.
• Prioritize risks based on business impact and likelihood.
• Recommend appropriate risk mitigation measures.
• Oversee SOC/SIEM, security monitoring, threat detection, and incident response.
• Monitor security alerts and emerging threats.
• Ensure vulnerabilities and security incidents are addressed promptly.
• Lead response to cyberattacks, data breaches, ransomware, and other security incidents.
• Establish and test incident-response and disaster-recovery procedures.
• Coordinate with IT, legal, HR, communications, management, and external agencies when required.
• Oversee vulnerability assessments, penetration testing, and security audits.
• Ensure critical vulnerabilities are remediated within defined timelines.
• Monitor patch-management effectiveness.
• Ensure appropriate access controls and least-privilege principles.
• Oversee MFA, privileged-access management, user access reviews, and authentication controls.
• Protect sensitive and confidential information.
• Establish data classification, encryption, DLP, retention, and access-control requirements.
• Work with privacy/legal teams on applicable data‑protection obligations.
• Ensure security architecture for cloud, networks, endpoints, applications, and APIs.
• Integrate security into software development and technology projects.
• Review major technology changes from a security perspective.
• Develop employee security‑awareness and phishing‑training programs.
• Promote a strong security culture across the organization.

Job description

Operational / Technical Responsibilities

Cybersecurity Strategy

1. Define and implement the organization's cybersecurity strategy.
2. Align security objectives with business and IT goals.
3. Establish security policies, standards, and procedures.

Risk Management

1. Identify and assess cybersecurity risks.
2. Maintain a cybersecurity risk register.
3. Prioritize risks based on business impact and likelihood.
4. Recommend appropriate risk mitigation measures.

Security Operations

1. Oversee SOC/SIEM, security monitoring, threat detection, and incident response.
2. Monitor security alerts and emerging threats.
3. Ensure vulnerabilities and security incidents are addressed promptly.

Incident Response & Crisis Management

1. Lead response to cyberattacks, data breaches, ransomware, and other security incidents.
2. Establish and test incident-response and disaster-recovery procedures.
3. Coordinate with IT, legal, HR, communications, management, and external agencies when required.

Vulnerability & Patch Management

1. Oversee vulnerability assessments, penetration testing, and security audits.
2. Ensure critical vulnerabilities are remediated within defined timelines.
3. Monitor patch-management effectiveness.

Identity & Access Management

1. Ensure appropriate access controls and least-privilege principles.
2. Oversee MFA, privileged-access management, user access reviews, and authentication controls.

Data Security & Privacy

1. Protect sensitive and confidential information.
2. Establish data classification, encryption, DLP, retention, and access-control requirements.
3. Work with privacy/legal teams on applicable data‑protection obligations.

Cloud, Network & Application Security

1. Ensure security architecture for cloud, networks, endpoints, applications, and APIs.
2. Integrate security into software development and technology projects.
3. Review major technology changes from a security perspective.

Security Awareness

1. Develop employee security‑awareness and phishing‑training programs.
2. Promote a strong security culture across the organization.