Lead Support Analyst

Nomura Holdings, Inc.; Mumbai; On-site; INR 2,200,000 - 4,200,000; Full time

Benefits offered by this job

Wellbeing services

Inclusive workplace

Awards & recognition

Job summary

Nomura Holdings, Inc. in India seeks an Automation Engineer to join the Information Security team. You will lead onboarding of new group entities into the VM Framework, migrate existing VM functions, and maintain scan coverage and SBC compliance while collaborating with infrastructure and application teams.

Ideal candidates have strong cybersecurity experience, vulnerability scanning skills, and the ability to automate tasks using Python or similar tools within a regulated financial environment.

Qualifications

• ,

Responsibilities

• Lead onboard of a new Nomura entity into Nomura’s VM Framework.
• Evaluate, migrate and standardize the new entity’s VM functions into Nomura’s VM Framework.
• Serve as backup manager to a VM Operations team of six.
• Maintain VM scan coverage, SBC compliance, console upgrades, and reporting.
• Monthly VM reporting and remediation tracking.
• Automate scanning and reporting to streamline policy enforcement.
• Participate in audits, compliance checks, and regulatory reporting for environment security.
• Contribute to continuous improvement of security scanning tools and processes.

Skills

Cyber security

Team management

Communication skills

CIS benchmarks knowledge

Vulnerability scanning tools

Cloud security

Analytical mindset

Cross-functional collaboration

Tools

Rapid7

Tenable

Qualys

Job description

Select how often (in days) to receive an alert:

Nomura is a financial services group with an integrated global network. By connecting markets East & West, Nomura services the needs of individuals, institutions, corporates and governments through its four business divisions: Wealth Management, Investment Management, Wholesale (Global Markets and Investment Banking), and Banking. Founded in 1925, the firm is built on a tradition of disciplined entrepreneurship, serving clients with creative solutions and considered thought leadership. For further information about Nomura, visit www.nomura.com .

Nomura Services, India supports the group’s global businesses. With world-class capabilities in trading support, research, information technology, financial control, operations, risk management and legal support, the firm plays a key role in facilitating the group’s global operations across four international regions.

At Nomura, creating an inclusive workplace is a priority. Our approach to inclusion encompasses a variety of initiatives, including sensitization campaigns, implementing conducive policies & programs, providing infrastructure support and engaging in community events. Over time, we have made meaningful progress in these areas, and this commitment has been well-recognized across the industry. We are proud recipients of the prestigious Top 10 Employers award by the India Workplace Equality Index (IWEI), IWEI Gold Employer of Choice awards, India CSR Leadership Award 2024 for Holistic Village Development Program and the YUVA Unstoppable Changemaker Awards.

Divisional Overview:

Powai Information security division is an integral part of Nomura where mostly support functions are delivered out of this entity. We mainly support Nomura wholesale business.

Senior management takes a hands-on approach within the department, and is keen to reward hard work, enthusiasm and success. Nomura presents a unique opportunity to learn and gain experience of a broad range of products and business lines within a supportive setting and surrounded by skilled professionals.

Business Overview:

We are seeking a skilled Automation Engineer to join our Information Security team within the Automation & AI function. This role combines Python development expertise with modern AI application development to drive intelligent automation initiatives across our security operations. The ideal candidate will bring hands-on experience building web applications, APIs, and AI-powered solutions, and security orchestration playbooks while maintaining a solid understanding of cybersecurity principles. You will work at the intersection of security, automation, and AI to transform how our organization approaches information security challenges.

What We Offer:

• We support employee wellbeing by ensuring a sense of purpose and belonging.
• We offer a comprehensive range of wellbeing services which allows employees to get access to the assistance they need at any point in their wellbeing journey.
• Our bespoke benefits support employees and their family’s holistic wellbeing and are inclusive of diverse identities and family structures.

Role Overview:

• Lead onboard of new Nomura entity into Nomura’s VM Framework
• Evaluate, migrate and standardize new entity’s existing VM functions into Nomura’s VM Framework

Key Responsibilities:

• Serving as a backup manager to a VM Operations team of six
• Primary function will be to onboard and maintain new Nomura Group Entity into current VM Framework
• Working directly for the IN VM Operations Manager
• Meeting regularly with New Group Entity CISO Manager as well as Technology Teams
• Perform and report on all VM and SBC operations deliverables for new Group Entity
• Maintain new Group Entity VM scan coverage, SBC compliance, console upgrades, control reporting, credential failures, console configuration, scan agents
• Monthly VM reporting and remediation tracking
• Maintain up-to-date knowledge of industry standards (e.g., CIS benchmarks) for virtualization, cloud, and web server environments.
• Work closely with infrastructure and application teams to ensure SBC compliance
• Automate scanning and reporting processes to streamline policy enforcement and improve efficiency.
• Track and report on remediation progress, providing technical support to teams as they address vulnerabilities.
• Participate in audits, compliance checks, and regulatory reporting related to environment security.
• Contribute to the continuous improvement of security scanning processes and tools.
• SBC
  • Perform regular security policy scans across all new group entity technologies
  • Analyse scan results, report on security gaps, and collaborate with infrastructure teams to remediate vulnerabilities.
  • Maintain up-to-date knowledge of industry standards (e.g., CIS benchmarks) for virtualization, cloud, and web server environments.
  • Work closely with infrastructure and application teams to ensure SBC compliance
  • Automate scanning and reporting processes to streamline policy enforcement and improve efficiency.
  • Track and report on remediation progress, providing technical support to teams as they address vulnerabilities.
  • Participate in audits, compliance checks, and regulatory reporting related to environment security.
  • Contribute to the continuous improvement of security scanning processes and tools.

Required Skills:

• Operational and cyber security background
• Small team management background
• Strong communication, delegation, decision making, time management and problem-solving skills
• Basic knowledge of CIS benchmarks for Unix, Windows, Networks, AWS, etc.
• Hands-on experience with vulnerability scanning and compliance tools like Rapid7, Tenable, Qualys, or equivalent.
• Understanding of cloud security principles and virtualization environments.
• Analytical mindset with the ability to interpret scan results and communicate recommendations.
• Strong collaboration and communication skills to work with cross-functional teams.

Preferred Skills

• Experience with automation and scripting (e.g., Python, Bash, PowerShell) to automate scanning tasks.
• Familiarity with any DB scripting language
• Exposure to security in financial institutions or highly regulated industries.

This role requires an operational security mindset, a collaborative attitude, and a passion for learning. The positions offer the opportunity to grow your skills in the financial industry’s vulnerability management space while contributing to the Nomura’s overall security posture. If you are passionate about cybersecurity, possess strong analytical and reporting skills, and thrive in a collaborative environment, we invite you to apply for this exciting opportunity.

We are committed to providing equal opportunities throughout employment including in the recruitment, training and development of employees. We prohibit discrimination in the workplace whether on grounds of gender, marital or domestic partnership status, pregnancy, carer’s responsibilities, sexual orientation, gender identity, gender expression, race, color, national or ethnic origins, religious belief, disability or age.

Applying for this role does not amount to a job offer or create an obligation on Nomura to provide a job offer. The expression "Nomura" refers to Nomura Services India Private Limited together with its affiliates.

The benefits are subject to change and will be in accordance with Company’s policies as may be applicable from time to time).