Cyber Security Manager

Antal TECH jobs; Mumbai; On-site; INR 167,400 - 279,000; Full time

Job summary

A leading security firm in Mumbai is seeking a Data Security Manager to oversee the monitoring and response to security events across various platforms. The role demands expertise in stakeholder management and team leadership, involved in both operational oversight and compliance with regulations. Candidates should possess key certifications like CISM or CISSP and have strong analytical abilities. The position is an exciting opportunity to enhance security operations in a dynamic work environment.

Qualifications

• Strong technical expertise in security operations.
• Proven experience in stakeholder coordination.
• Ability to manage and guide junior SOC analysts.

Responsibilities

• Monitor and respond to security alerts and incidents.
• Conduct root cause analysis and support incident reporting.
• Manage and guide junior SOC analysts.

Skills

XDR platforms

Forcepoint DLP

Thales/Imperva DAM

Network Access Control (NAC)

ARCON Privileged Access Management

Strong stakeholder management

Analytical mindset

Education

CISM, CISSP, CEH, or equivalent

Job description

The Data Security Manager will be responsible for continuous monitoring, analysis, and response to security events across multiple security platforms, including XDR, DLP, DAM, NAC, and Privileged Access Management (PAM). The role requires strong technical expertise, stakeholder coordination, and team and budget management capabilities to ensure effective security operations aligned with organizational and regulatory requirements.

Key Responsibilities

• Monitor, analysed, and respond to security alerts and incidents using XDR platforms.
• Perform investigation, and containment of security events to minimize business impact.
• Ensure timely incident response and closure in line with defined SOC SLAs.
• Conduct root cause analysis (RCA) and support incident reporting and audit reviews.
• DLP (Forcepoint): Monitor and analyse data leakage incidents.
• Validate policy violations, coordinate with application and business owners, and support whitelisting/closure based on business justification.
• Dam (Thales / Imperva): Review database activity alerts, identify false positives, and ensure legitimate activities are whitelisted with approvals.
• Support compliance reporting and audit evidence for database monitoring controls.
• NAC: Monitor network access events and enforce access policies.
• Coordinate remediation for non‑compliant endpoints.
• PAM (ARCON): Monitor privileged access activities.
• Review session logs and alerts to detect misuse or policy violations.

Stakeholder & Business Coordination

• Act as a primary security point of contact for application owners, IT teams, risk, audit, and compliance stakeholders.
• Communicate security findings, risks, and required actions in a clear and professional manner.
• Drive timely responses from stakeholders for alert validation, closure, and remediation.
• Ensure SOC operations align with internal security policies, regulatory requirements, and audit expectations.
• Support internal and external audits by providing logs, reports, and evidence.
• Maintain proper documentation for incidents, SOPs, and control effectiveness.

Team & Budget Management

• Manage and guide junior SOC analysts and vendor resources.
• Track operational metrics, tool utilization, and resource efficiency.
• Support budget planning, vendor coordination, and cost optimization for SOC tools and services.

Technical Skills

• XDR platforms
• Forcepoint DLP
• Thales/Imperva DAM
• Network Access Control (NAC)
• ARCON Privileged Access Management
• Strong understanding of process workflows, SIEM/XDR alerting, and incident response processes
• Knowledge of database security, endpoint security, and access control mechanisms

Soft Skills

• Strong stakeholder management and communication
• Ability to balance security requirements with business operations
• Analytical mindset with attention to detail and documentation

Preferred Certifications

• CISM, CISSP, CEH, or equivalent
• Experience in regulated environments (BFSI, stock exchange, critical infrastructure) is an added advantage.
• Exposure to audits, regulatory compliance, and risk management frameworks