Information Technology Security Specialist

Senvion India; Mumbai; Presencial; INR 1.400.000 - 2.400.000; Tempo integral

Resumo da vaga

Senvion India Pvt. Ltd. is seeking a senior cybersecurity leader to oversee enterprise security operations across on‑prem and cloud environments, define strategies, and ensure governance.

The role includes incident detection, response planning, vulnerability management, and risk assessments to protect organizational assets. The incumbent will coordinate with IT teams, MSSPs, and partners, drive improvements, and report security metrics to executives.

Responsabilidades

• Lead and manage enterprise cyber security operations across on-premises, cloud, applications, and end-user environments.
• Define and implement cyber security strategies, policies, standards, and procedures aligned to business goals.
• Ensure adherence to governance frameworks: NIST, ISO 27001, MITRE ATT&CK, COBIT, ITIL, and best practices.
• Drive continuous improvement to boost cyber resilience and security maturity.
• Lead incident detection, analysis, containment, eradication, recovery, and post-incident reviews.
• Develop, test, and maintain incident response plans, runbooks, and playbooks.
• Coordinate with stakeholders, IT teams, MSSPs, and partners during incidents.
• Ensure timely reporting and escalation of incidents per defined matrices.
• Perform root cause analysis and implement preventive controls to reduce recurrence.
• Own and manage enterprise vulnerability programs across infra, apps, cloud, and endpoints.
• Oversee Vulnerability Assessment and Penetration Testing (VAPT) activities.
• Drive OS, infrastructure, and application patch management programs.
• Prioritize remediation based on business impact and risk exposure.
• Validate fixes through regular assessments and reviews.
• Identify security weaknesses and propose risk mitigation strategies.
• Conduct enterprise security risk assessments and security reviews.
• Ensure compliance with regulatory, legal, and internal requirements.
• Support audits for ISO 27001:2022 and other standards.
• Establish security controls to protect assets and information.
• Develop security metrics, dashboards, and executive-level reporting.
• Manage MSSPs, OEMs, consultants, and technology partners.
• Govern security service delivery: SLAs, SLOs, and performance metrics.
• Conduct regular service reviews and ensure contractual compliance.
• Drive partner accountability for security deliverables and operational effectiveness.

Descrição da vaga

• Lead and manage enterprise cyber security operations across on-premises infrastructure, cloud platforms, applications, and end-user environments.
• Define and implement cyber security strategies, policies, standards, and operational procedures aligned with business objectives.
• Ensure adherence to security governance frameworks including NIST, ISO 27001, MITRE ATT&CK®, COBIT, ITIL, and other industry best practices
• Drive continuous improvement initiatives to enhance organizational cyber resilience and security maturity.

Security Incident Response

• Lead cyber security incident detection, analysis, containment, eradication, recovery, and post-incident review activities.
• Develop, maintain, and periodically test incident response plans, runbooks, and playbooks.
• Coordinate with business stakeholders, IT teams, MSSPs, and external partners during security incidents.
• Ensure timely reporting, escalation, and communication of security incidents according to defined escalation matrices.
• Conduct root cause analysis and implement preventive controls to reduce recurrence of security incidents.

Vulnerability Management & Security Assurance

• Own and manage enterprise vulnerability management programs across infrastructure, applications, cloud platforms, and endpoints.
• Conduct and oversee Vulnerability Assessment and Penetration Testing (VAPT) activities.
• Drive operating system, infrastructure, and application patch management programs.
• Prioritize remediation activities based on business impact and risk exposure.
• Validate security fixes and remediation effectiveness through regular assessments and reviews.
• Identify security weaknesses and recommend risk mitigation strategies.

Risk Management, Compliance & Audits

• Conduct enterprise security risk assessments and security reviews.
• Ensure compliance with regulatory, legal, and internal security requirements.
• Support internal audits, external audits, customer audits, and certification activities for ISO 27001:2022.
• Establish and maintain security controls to protect organizational assets and sensitive information.
• Develop security metrics, dashboards, and executive-level reporting.

Risk Management, Compliance & Audits

• Conduct enterprise security risk assessments and security reviews.
• Ensure compliance with regulatory, legal, and internal security requirements viz CERT in, CEA,PDP, ISO 27001 etc
• Support internal audits, external audits, customer audits, and certification activities for ISO 27001:2022.
• Establish and maintain security controls to protect organizational assets and sensitive information.
• Develop security metrics, dashboards, and executive-level reporting.
• Manage MSSPs, OEMs, consultants, and technology partners.
• Establish and govern security service delivery processes, SLAs, SLOs, and performance metrics.
• Conduct regular service reviews and ensure contractual compliance.

Drive partner accountability for security deliverables and operational effectiveness.