Information Security II-SUPPORT SERVICES-IT Security

Kotak Mahindra Bank; Maharashtra; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Kotak Mahindra Bank in Mumbai seeks a Senior Manager / AVP for Network & Security Operations Compliance to own audit and regulatory submissions. You will coordinate with Internal and External Auditors, IT Security, and IT Compliance teams to ensure timely data and artifact delivery.

The role requires 6–10 years of experience in Cyber Security, GRC, and security operations, with hands-on exposure to PCI DSS, NIST, and RBI frameworks.

Qualifications

• Minimum 7 years of experience in Cyber Security, GRC, and audits.
• Experience across Network/Security Operations and PCI DSS.
• Exposure to RBI Cybersecurity Framework and regulatory audits.
• Strong presentation and stakeholder management skills.
• MBA/Engineering or equivalent postgraduate degree required.

Responsibilities

• SPOC for Audit & Compliance activities for Network & Security Operations.
• Coordinate with internal/external/regulatory auditors and IT teams.
• Ensure timely submission of data, artefacts, and responses during audits.
• Lead discussions with auditors and review non-conformities.
• Maintain records of non-conformities and compliance artefacts.
• Publish security compliance dashboards to senior management.

Skills

GRC knowledge

Cybersecurity

Auditing experience

Information Security

Stakeholder management

Education

MBA or BE/B.Tech

MS/M.Tech/M.E.

Tools

Firewalls

WAFs

VPNs

PAM

DLP

Job description

Job Title: Senior Manager / Associate Vice President - Network & Security Operations Compliance

Job Purpose

Oversee the Audit and Compliance activities for the Network & Security Operations within the Information Technology division of the Bank. This role requires effective collaboration with Internal Auditors, External Auditors, Regulatory Auditors, the Information Security Team, the IT Compliance Team, IT - PMO team and the Project and Support teams of the Network & Security Operations function

Location: Mumbai

Years of experience: 6 to 10 Years

Job Description

• Single Point of Contact (SPOC) for Audit & Compliance activities of the Network & Security Operations Function.
• Collaborate with the Project & Support team of the Network & Security Operations function to:
• Ensure timely submission of data requirements for various internal, external, and regulatory audits.
• Lead discussions with auditors during process and technology walkthroughs.
• Review auditee responses for non-conformities raised in various audits.
• Maintain up-to-date records of non-conformities raised in audits.
• Document the progress of closing non-conformities identified in audits.
• Review auditee responses and artefacts for compliance with non-conformities raised in audits.
• Ensure timely submission of auditee responses and artefacts to relevant stakeholders.
• Maintain up-to-date records of non-conformities, compliance submissions, and supporting artefacts for easy reference.
• Provide information to senior management as needed.
• Collaborate with the Information Security Team, IT Compliance, and Project/Support Team of the Network & Security Operations function to:
• Ensure timely closure of non-conformities raised in Security Assessment activities such as VAPT, Application Security Testing, and Red Team Assessment.
• Ensure compliance with PCI DSS requirements.
• Ensure timely submission of compliance to regulatory requirements such as Master Directions, Circulars, Advisories, Alerts, and Ad hoc Questionnaires.
• Ensure timely submission of regulatory requirements such as Cybersecurity KRIs, OKRs, and RBS Tranche.
• Maintain Standard Operating Procedures (SOPs) and ensure their timely update.
• Maintain an up-to-date inventory of Applications, Servers, Security, and Network Devices for the function.
• Track compliance across various domains, including Inventory Management, Patch Management, Vulnerability Management, Change Management, and Exception Management.
• Publish compliance dashboards to senior management on a periodic basis.

Eligibility

• Minimum 7 years of experience as a Cyber Security practitioner with relevant knowledge in Governance, Risk, and Compliance (GRC).
• Experience in Information Security domains such as Network Security Management, Perimeter Security Management, Identity & Access Management, Cyber Risk Management, Data Loss Prevention, and Infrastructure Security.
• Hands-on experience in managing Cybersecurity solutions, particularly in one or more of the following: Firewalls, Web Application Firewalls (WAFs), Remote Access VPNs, Micro-segmentation, Privileged Access Management, 2FA solutions, Data Loss Prevention, and File Integrity Monitoring.
• Experience in assessing and/or implementing security and risk standards, including ISO 27001, NIST CSF, PCI DSS v3.2.1/4.0, and RBI Cybersecurity Framework.
• Well-versed in cybersecurity auditing methodologies.
• MBA/Graduate with B.E/B.Tech degree or Post Graduate with M.S/M.Tech/M.E.
• Preferred cybersecurity certifications: CISA, CISM, CCNA, CCNP, Microsoft Technologies, etc.
• Strong team player with excellent presentation, communication, and management skills.
• Uphold high standards of ethical behaviour and professionalism.