IT Networking & Security Specialist

Selfconsultant; Mumbai City; On-site; INR 2,500,000 - 3,800,000; Full time

Job summary

Savex Technologies Pvt. Ltd. is seeking an IT Networking & Security Specialist to oversee security operations in Mumbai.

You will manage incident response, vulnerability assessments, and security testing while ensuring compliance with security policies across IT infrastructure. Ideal candidates have 7–10 years in security risk and information security roles, with expertise in IAM, IDS/IPS, data protection, and DLP, plus relevant ISO/IEC certifications.

Qualifications

• Minimum 7 to 10 years of experience in a similar security role.
• Degrees in Computer Science, IT Security, Business IT, or IT engineering would be an advantage.
• Proven experience in analysis, identifying, monitoring and controlling security risks
• Experience in managing Identity/Access management, Intrusion Detection/Prevention, Data Protection and Data Leakage Prevention applications/devices including installation, configuration and availability
• Extended knowledge of ISO/IEC 27000-series, best practices (ITIL), and third party reporting (ISAE3402, SOC)
• Must have one or more certifications from ISACA CSX, CISA, CISM, CGEIT, CRISC or ISC2 SSCP, CCSP, CISSP or GIAC GISP/GSEC

Responsibilities

• Responsible for security system administration, security incident management, vulnerability assessment and security testing.
• Maintain corporate compliance with security policies and applicable standards.
• Ensure IT application systems and infrastructure security.
• Develop and implement security policies, standards, guidelines and processes for ongoing security management.
• Develop and maintain a security control framework to ensure effectiveness and remediation.
• Support and maintain ISMS for compliance with regulations and contractual obligations.
• Conduct independent security audits and risk assessments to improve security posture.
• Participate in enterprise risk management to identify threats and institute security programs.
• Develop and maintain a standard security contract framework for ITO outsourcing.
• Develop and maintain a security awareness program to assure widespread information security culture.
• Support and maintain IT Security systems including network security and SIEM systems.
• Conduct IT security incident investigation and threat hunting; oversee incident responses and investigations of breaches.

Skills

Documentation

Communication

Security risk analysis

Identity & Access management

Intrusion Detection/Prevention

Data protection

Data leakage prevention

Education

Bachelors in CS/IT/Engineering

Relevant IT security certifications

Tools

ColorTokens

Seceon

CrowdStrike

NetSkope

Aruba Clearpass

Fortigate

Job description

IT Networking & Security Specialist

Company Name: Savex Technologies Pvt. Ltd.

Corporate video - https://www.youtube.com/watch?v=AVw5UY2N-X4&t=15s

E - Brochure - https://www.digitaltechmedia.in/magazine/savex/savex.html

Website - www.savex.in

About us - http://www.savex.in/about-us.php

Branch Locations - http://www.savex.in/branch.php

Company details

Savex Technologies Pvt ltd is the 3rd largest Information and communication technology distributor in Asia for diverse Business sectors. They provide services like Consulting and Technical Support, Demo Lab and testing, Marketplace fulfillment services, Financial Services, Reverse Logistics & warranty Management services, Supply Services, Online Store Services. They are leading players in the IT Infrastructure, Network Solutions, Security Solutions and Cybersecurity solutions domain.

Its a seasoned company operating for the last 35 years

Location:

Mumbai

Mode of Working:

Work Form Office

Days of Working:

6 days a week (First 2 saturdays are off; 3rd and 4th Sat is half day)

Responsibilities

• Responsible for security system administration, security incident management, vulnerability assessment and security testing.
• Maintain corporate compliance with security policies and applicable standards.
• Ensure IT application systems and infrastructure security.

Job Brief

• Essential functions conducting proactive research to analyse security weaknesses and recommend appropriate strategies.
• Providing security design reviews of new and existing systems. Identifying current and emerging technology issues including security trends, vulnerabilities and threats.

Governance, Compliance, Audits

• Support the development and implementation of security policies, standards,
• guidelines and processes to ensure the ongoing maintenance of physical and logical security.
• Develop and maintain a security control framework to ensure that security management systems and policies are effective, providing recommendations and remediation.
• Support and maintain the Information Security Management System (ISMS) to assure continuous compliance with regulations, laws and contractual obligations by adopting and deploying industry and market standards and accepted best practices.
• Conduct independent security audits, risk management assessments to verify and provide recommendations to improve security posture.
• Participate in the security operational risk management activities as part of the
• Enterprise Risk Management to identify threats and institute appropriate security programs.
• Develop and maintain a standard security contract framework for ITO outsourcing to ensure a harmonised and consistent security control framework.
• Maintain documentation of policies, processes within the organization

Training

• Develop and maintain a security awareness program to assure a widespread culture
• of information security awareness.

Incident Management

• Support and maintain IT Security systems including network security and SIEM
• system.
• Conduct IT security incident investigation and threat hunting on the IT environment.
• Develop and support emergency procedures and oversee incident responses as well as the investigation of security breaches and assist with disciplinary and legal matters associated with such breaches as required.

Skills Needed

Tools

• Familiarity with configuration, management of any security platforms / tools such as ColorTokens, Seceon, CrowdStrike, NetSkope, Aruba Clearpass, Fortigate would be a plus.

Requirements

• Good documentation and communication skills
• Minimum 7 to 10 years of experience in a similar role, i.e. in a combination role of security risk, information security and IT.
• Degrees in relevant fields such as Computer Science, IT Security, Business IT, or IT engineering would be an advantage.
• Proven experience in analysis, identifying, monitoring and controlling security risks
• Experience in managing Identity / Access management, Intrusion Detection / Prevention, Data Protection and Data Leakage Prevention applications / devices including installation, configuration and its availability
• Extended knowledge of relevant international security standards (ISO/IEC 27000-series), best practices (CobiT, ITIL), third party reporting (ISAE3402, SOC)
• Must have a minimum of one of the certifications from ISACAs CSX, CISA, CISM, CGEIT or CRISC or ISC2s SSCP, CCSP, or CISSP or GIACs GISP or GSEC

Interview process:

Virtual + Face to Face