Manager - IT Security - SCO

DP World; Navi Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

DP World in Navi Mumbai is seeking a senior security professional to oversee SOC operations, incident response, vulnerability management, and IAM/PAM. You will coordinate security across cloud, data, and OT/IT environments, conduct security reviews, and drive remediation and go-live security readiness.

The role emphasizes cross-functional security governance across infrastructure, applications, and critical operations, with ongoing adoption of XDR and AI security tools as needed.

Responsibilities

• Oversee SOC operations, security monitoring, threat detection, ticket management, escalation, SLA management, and closure.
• Lead incident response, investigation, containment, recovery, RCA, and corrective actions.
• Maintain Incident Response (IR) plans and playbooks and conduct tabletop exercises and drills.
• Technical & Infrastructure Security
• Manage vulnerability assessments, penetration testing, technical security assessments, remediation, and overall vulnerability risk posture.
• Oversee endpoint, EDR, server, network, firewall, VPN, segmentation, encryption, patching, and security hardening.
• Validate security controls and coordinate remediation and closure of technical findings.
• IAM & PAM
• Manage IAM and PAM, privileged access, MFA, least privilege, role-based access, provisioning/deprovisioning, and periodic access reviews.
• Ensure appropriate access controls and remediation of identity and access-related risks.
• Cloud, Application & Data Security
• Implement security controls for Azure/cloud infrastructure, identity, connectivity, configuration, logging, and monitoring.
• Conduct application security reviews and coordinate SAST, DAST, penetration testing, and remediation.
• Drive data protection, DLP, encryption, classification, and PII security controls.
• OT/IT & Critical Infrastructure Security
• Coordinate cybersecurity across OT and IT environments supporting port and terminal operations.
• Conduct IT/OT risk assessments and implement segmentation and security controls aligned with applicable OT security standards.
• Technology Projects & Security Architecture
• Perform security reviews for technology projects, POCs, applications, cloud services, and infrastructure changes.
• Adhere to security requirements, review architecture, assess risks, coordinate remediation, and provide security recommendations for go-live.
• Implement XDR, AI Security as and when required

Job description

• Oversee SOC operations, security monitoring, threat detection, ticket management, escalation, SLA management, and closure.
• Lead incident response, investigation, containment, recovery, RCA, and corrective actions.
• Maintain Incident Response (IR) plans and playbooks and conduct tabletop exercises and drills.
• Technical & Infrastructure Security
• Manage vulnerability assessments, penetration testing, technical security assessments, remediation, and overall vulnerability risk posture.
• Oversee endpoint, EDR, server, network, firewall, VPN, segmentation, encryption, patching, and security hardening.
• Validate security controls and coordinate remediation and closure of technical findings.
• IAM & PAM
• Manage IAM and PAM, privileged access, MFA, least privilege, role-based access, provisioning/deprovisioning, and periodic access reviews.
• Ensure appropriate access controls and remediation of identity and access-related risks.
• Cloud, Application & Data Security
• Implement security controls for Azure/cloud infrastructure, identity, connectivity, configuration, logging, and monitoring.
• Conduct application security reviews and coordinate SAST, DAST, penetration testing, and remediation.
• Drive data protection, DLP, encryption, classification, and PII security controls.
• OT/IT & Critical Infrastructure Security
• Coordinate cybersecurity across OT and IT environments supporting port and terminal operations.
• Conduct IT/OT risk assessments and implement segmentation and security controls aligned with applicable OT security standards.
• Technology Projects & Security Architecture
• Perform security reviews for technology projects, POCs, applications, cloud services, and infrastructure changes.
• Adhere to security requirements, review architecture, assess risks, coordinate remediation, and provide security recommendations for go-live.
• Implement XDR, AI Security as and when required