Hiring For Information Security (VAPT) - Jaipur & Mumbai

Sk Finance; Jaipur, Mumbai; Sur place; INR 1 200 000 - 2 400 000; Plein temps

Résumé du poste

Sk Finance in Jaipur, India, seeks an Information Security Specialist to manage cybersecurity governance, vulnerability management, compliance, audits, risk assessments, security awareness initiatives, and control assurance activities. The role ensures adherence to regulatory requirements, organizational security standards, and continuous improvement of the organization's security posture.

This role requires coordination with stakeholders across the business to implement safe, scalable security

Qualifications

• Bachelor's degree in CS/IT/Cyber Security or related field.
• Certifications such as CEH, ISO 27001, Security+ preferred.
• Proven experience in information security governance, compliance, vulnerability management, audits, and risk management.

Responsabilités

• Manage the end-to-end Vulnerability Assessment & Penetration Testing (VAPT) program across the organization.
• Maintain asset inventory and coordinate vulnerability scanning activities.
• Track remediation efforts and ensure timely closure of identified vulnerabilities.
• Coordinate with external security vendors and stakeholders for assessment activities.
• Prepare and present security and vulnerability management reports to management.
• Develop, maintain, and update Information Security policies, procedures, standards, guidelines, and runbooks.
• Monitor and validate security KPIs.
• Track and ensure compliance with backup and patch management processes.
• Ensure adherence to regulatory, contractual, and organizational information security requirements.
• Support continuous improvement of governance and compliance frameworks.
• Coordinate internal, external, regulatory, and customer security audits.
• Prepare audit documentation and facilitate audit reviews.
• Track audit observations, non-conformities, and corrective actions.
• Ensure timely closure of audit findings and compliance gaps.
• Review and validate the effectiveness of security controls across the organization.
• Monitor and assess key security technologies and controls (DLP, BAS, Security Monitoring).
• Recommend improvements to strengthen security posture.
• Plan and execute cybersecurity awareness programs and phishing simulations.
• Conduct phishing simulations to assess user awareness and resilience.
• Analyze awareness metrics and risk trends for management reports.
• Conduct annual Risk Assessments aligned with RBI guidelines and regulatory requirements.
• Identify, document, and evaluate information security risks.
• Track remediation plans and ensure timely closure of risks and control gaps.
• Support team capability development through training and mentoring.
• Facilitate knowledge transfer and documentation of key processes and controls.

Connaissances

Vulnerability & Risk Management

Information Security Governance

Regulatory Compliance & Audit

Security Metrics & Reporting

Security Awareness Programs

Stakeholder Management

Analytical and Problem-Solving

Effective Communication &Documentation

Formation

Bachelor's degree in Computer Science, Information Technology, Cyber Security, or related field

Description du poste

Job Summary:

The Information Security Specialist is responsible for managing cybersecurity governance, vulnerability management, compliance, audits, risk assessments, security awareness initiatives, and control assurance activities. The role ensures adherence to regulatory requirements, organizational security standards, and continuous improvement of the organization's security posture.

Key Responsibilities

Vulnerability Assessment & Penetration Testing (VAPT) Program Management

• Manage the end-to-end Vulnerability Assessment & Penetration Testing (VAPT) program across the organization.
• Maintain asset inventory and coordinate vulnerability scanning activities.
• Track remediation efforts and ensure timely closure of identified vulnerabilities.
• Coordinate with external security vendors and stakeholders for assessment activities.
• Prepare and present fortnightly, monthly, and quarterly security and vulnerability management reports to management.

2. Information Security Governance & Compliance

• Develop, maintain, and update Information Security policies, procedures, standards, guidelines, and runbooks.
• Monitor and validate security Key Performance Indicators (KPIs).
• Track and ensure compliance with backup management and patch management processes.
• Ensure adherence to regulatory, contractual, and organizational information security requirements.
• Support continuous improvement of governance and compliance frameworks.

3. Audit Management

• Coordinate internal, external, regulatory, and customer security audits.
• Prepare audit documentation and facilitate audit reviews.
• Track audit observations, non-conformities, and corrective actions.
• Ensure timely closure of audit findings and compliance gaps.

4. Security Control Assurance

• Review and validate the effectiveness of security controls across the organization.
• Monitor and assess key security technologies and controls, including:
  • Data Loss Prevention (DLP)
  • Breach & Attack Simulation (BAS)
  • Security Monitoring and Control Validation Activities
• Recommend improvements to strengthen the organization's security posture.

5. Cyber Security Awareness & Phishing Simulations

• Plan and execute cybersecurity awareness programs and campaigns.
• Conduct phishing simulation exercises to assess user awareness and resilience.
• Analyze awareness campaign effectiveness and phishing simulation outcomes.
• Prepare management reports highlighting awareness metrics, participation, and risk trends.

6. Risk Assessment (RA)

• Conduct and coordinate annual Risk Assessments (RA).
• Ensure assessments are aligned with RBI guidelines and applicable regulatory requirements.
• Identify, document, and evaluate information security risks.
• Track remediation plans and ensure timely closure of identified risks and control gaps.

7. Team Development & Knowledge Management

• Support team capability development through structured training and mentoring.
• Facilitate knowledge transfer sessions and documentation of key processes and controls.
• Ensure smooth transition of responsibilities across team members.
• Promote continuous learning and information security best practices within the team.

Required Qualifications & Experience

• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field.
• Relevant certifications such as CEH, ISO 2701, Security+, preferred.
• Proven experience in information security governance, compliance, vulnerability management, audits, and risk management.

Key Skills

• Vulnerability & Risk Management
• Information Security Governance
• Regulatory Compliance & Audit Management
• Security Metrics & Reporting
• Security Awareness Programs
• Stakeholder Management
• Analytical and Problem-Solving Skills
• Effective Communication and Documentation