Manager - Information Security Risk Management

Axis Max Life Insurance Limited; Haryana; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Axis Max Life Insurance Limited is seeking an experienced Information Security specialist to design and run a 24x7 Security Operations Center, independently managing security operations and reducing exposure surface. You will lead a SME team, drive KPI reporting, and collaborate across teams to implement security policies.

Requirements include 4+ years in SOC with SIEM/SOAR, strong networking, and relevant certifications. Excellent communication and a proactive, self-driven mindset are essential.

Qualifications

• Graduate/Postgraduate in Information Management and Security (B. Tech/M.Tech/MS)
• 4+ years of relevant experience in SOC functionality and security tools such as Firewall, IPS/IDS, Proxy, Web Filter, WAF, AV, DLP etc.
• Experience with network security and networking technologies and with system, security, and network monitoring tools
• Demonstrated skills in collaboration, teamwork and problem solving to achieve goals
• Prefer candidate with certifications such as CISSP, OSCP, CCSP, CISM or SIEM certified

Responsibilities

• Design, implement, and run robust security operations center systems and strategies to protect infrastructure and data
• Handle 24x7 SOC Team of SMEs
• Meet the defined KPI of Security Operations center
• SOC Governance and monthly and quarterly KPI and SOC performance reporting
• Must have worked on SIEM, SOAR and Threat intelligence platform
• Review configuration of network security tools (Firewall, WAF, Proxy, Email Solution, IDAM, SIEM, SSO, XDR, PAM)
• Review cloud native configurations across AWS, Azure, OCI
• Assess information security tools for effectiveness and integrate tools to limit systemic risk
• Conduct risk assessments and vulnerability scans and coordinate with IT to close findings
• Collaborate with cross-functional teams to define and enforce security policies and best practices
• List gaps identified and work with IT to resolve them

Skills

SOC operations

SIEM

SOAR

Threat intelligence

Firewall

WAF

IDS/IPS

DLP

Cloud security

Networking

Collaboration

Education

B.Tech / M.Tech / MS in Information Security

Tools

Firewall

IPS/IDS

Proxy

Web Filter

WAF

AV

DLP

IDAM

SSO

XDR

Job description

Job Summary:

Experienced Information Security specialist with hands-on experience on designing security operations center and running the 24x7 SOC independently. A continuous learner who is self-driven, team player and zeal to bring security transformation by reducing the exposure surface

Responsibilities:

• Design and implement and run robust security operations center systems and strategies to protect our organization's infrastructure and data
• Handle 24x7 SOC Team of SME’s
• Meet the defined KPI of Security Operations center
• SOC Governance and monthly and quarterly KPI and SOC performance reporting
• Must have worked on SIEM, SOAR and Threat intelligence platform
• Review the configuration of network security tools, such as, Firewall, WAF, Proxy, Email Solution, IDAM, SIEM, SSO, XDR, PIM / PAM etc.
• Review the configuration of cloud native tools across different Cloud Service Providers, e.g., AWS, Azure, OCI etc.
• Assess information security tools for effectiveness and help integrate tools for limiting systemic risk (implementing MESH architecture)
• Conduct risk assessments and vulnerability scans to identify potential security gaps and recommend appropriate countermeasures and work with IT for the closure of findings.
• Collaborate with cross-functional teams to define and enforce security policies, procedures, and best practices
• List down the gaps identified and work with IT to get them resolved.

Minimum Requirements:

• Graduate/Postgraduate in Information Management and Security (B. Tech/M.Tech/MS)
• 4+ years of relevant experience in SOC functionality and security tools such as Firewall, IPS/IDS, Proxy, Web Filter, WAF, AV, DLP etc.
• Experience with network security and networking technologies and with system, security, and network monitoring tools
• Demonstrated skills in collaboration, teamwork and problem solving to achieve goals
• Prefer candidate with certifications such as CISSP, OSCP, CCSP, CISM or SIEM certified

Strong Communication and presentation skills