Manager - Information Security Risk Management

Axis Max Life Insurance Limited; Gurugram District; On-site; INR 1,400,000 - 2,100,000; Full time

Job summary

Axis Max Life Insurance Limited is seeking an experienced Information Security specialist to design, implement and run a robust 24x7 Security Operations Center, driving security transformation and reducing exposure. The role requires hands-on work with SIEM, SOAR and threat intelligence platforms, configuring network and cloud security controls, and collaborating with IT to close findings.

Strong communication and teamwork are essential for success.

Qualifications

• Graduate/Postgraduate in Information Management and Security (B. Tech/M.Tech/MS)
• 4+ years of relevant experience in SOC functionality and security tools such as Firewall, IPS/IDS, Proxy, Web Filter, WAF, AV, DLP etc.
• Experience with network security and networking technologies and with system, security, and network monitoring tools.
• Demonstrated skills in collaboration, teamwork and problem solving to achieve goals.
• Prefer candidate with certifications such as CISSP, OSCP, CCSP, CISM or SIEM certified

Responsibilities

• Design and implement and run robust security operations center systems and strategies to protect our organization's infrastructure and data
• Handle 24x7 SOC Team of SME’s
• Meet the defined KPI of Security Operations center
• SOC Governance and monthly and quarterly KPI and SOC performance reporting
• Must have worked on SIEM, SOAR and Threat intelligence platform
• Review the configuration of network security tools, such as, Firewall, WAF, Proxy, Email Solution, IDAM, SIEM, SSO, XDR, PIM / PAM etc.
• Review the configuration of cloud native tools across different Cloud Service Providers, e.g., AWS, Azure, OCI etc.
• Assess information security tools for effectiveness and help integrate tools for limiting systemic risk (implementing MESH architecture)
• Conduct risk assessments and vulnerability scans to identify potential security gaps and recommend appropriate countermeasures and work with IT for the closure of findings.
• Collaborate with cross-functional teams to define and enforce security policies, procedures, and best practices
• List down the gaps identified and work with IT to get them resolved.

Skills

SOC operations

SIEM

SOAR

Threat intelligence

Cloud security

Networking basics

Team collaboration

Communication

Education

B.Tech/M.Tech/MS in Information Security

Tools

SIEM

SOAR

Threat intelligence

IDAM

XDR

PIM/PAM

Job description

Job Summary:

Experienced Information Security specialist with hands-on experience on designing security operations center and running the 24x7 SOC independently. A continuous learner who is self-driven, team player and zeal to bring security transformation by reducing the exposure surface

Responsibilities:

• Design and implement and run robust security operations center systems and strategies to protect our organization's infrastructure and data
• Handle 24x7 SOC Team of SME’s
• Meet the defined KPI of Security Operations center
• SOC Governance and monthly and quarterly KPI and SOC performance reporting
• Must have worked on SIEM, SOAR and Threat intelligence platform
• Review the configuration of network security tools, such as, Firewall, WAF, Proxy, Email Solution, IDAM, SIEM, SSO, XDR, PIM / PAM etc.
• Review the configuration of cloud native tools across different Cloud Service Providers, e.g., AWS, Azure, OCI etc.
• Assess information security tools for effectiveness and help integrate tools for limiting systemic risk (implementing MESH architecture)
• Conduct risk assessments and vulnerability scans to identify potential security gaps and recommend appropriate countermeasures and work with IT for the closure of findings.
• Collaborate with cross-functional teams to define and enforce security policies, procedures, and best practices
• List down the gaps identified and work with IT to get them resolved.

Minimum Requirements:

• Graduate/Postgraduate in Information Management and Security (B. Tech/M.Tech/MS)
• 4+ years of relevant experience in SOC functionality and security tools such as Firewall, IPS/IDS, Proxy, Web Filter, WAF, AV, DLP etc.
• Experience with network security and networking technologies and with system, security, and network monitoring tools
• Demonstrated skills in collaboration, teamwork and problem solving to achieve goals
• Prefer candidate with certifications such as CISSP, OSCP, CCSP, CISM or SIEM certified

Strong Communication and presentation skills