Senior Security Manager

GA DIGITAL WEB WORD Private Limited; Bengaluru; On-site; INR 2,000,000 - 3,000,000; Full time

Job summary

GA DIGITAL WEB WORD Private Limited is hiring a Senior Security Manager to lead security operations, architecture and governance. The role focuses on enhancing perimeter defenses, incident response, audits, and policy development.

The candidate will manage a security organization, interact with clients and stakeholders, and drive security improvements at technology centers. Location is Bengaluru with liaison to UIDAI ISD Delhi, and the position requires strong cloud, network, and threat

Qualifications

• Minimum 10 years of work experience in cyber security and related domains.
• Experience in security operations management and client/stakeholder handling.
• Knowledge of information security standards and policy implementation.

Responsibilities

• Lead security operations and improve the organization’s security posture.
• Oversee perimeter defenses including firewall, WAF, and cloud security controls.
• Direct incident response, monitoring, and preventive maintenance.
• Coordinate audits and liaison with external auditors and stakeholders.
• Develop, implement and govern security policies, standards and controls.

Skills

Cyber Security

SOC (Security Operations Center)

Network Security

Cloud Security

Team Management

External Audits

Client Stakeholder Management

Solution Architecture

Policy & Standards Development

ISO 27001

Risk Management

Incident Response

Threat Intelligence

Education

BE / B.Tech / M.Sc. Computers/M.Sc. IT/ MCA

Job description

Position Details

• Position: Senior Security Manager Band: F (TSU), Salary – ₹ 20–30 LPA Location: Under ISD, UIDAI HQ, Delhi but stationed at Technology Centre, Bengaluru Number of Positions: 1
• Educational Qualification BE / B.Tech / M.Sc. Computers/M.Sc. IT/ MCA.
• Mandatory Certification (any one): CISSP, CISM, CCSP
• Experience Minimum 10 years of work experience in: Cyber Security, Security Operations Center (SOC), Network Security, Cloud Security. Experience in management of security operations and security organization Experience in managing external audits Experience in facing client, internal stakeholder management and team management Ability to develop solution architecture designs Good understanding of Cloud Security and Control Matrix Experience in drafting and implementing policies, procedures and standards Knowledge of information security standards such as ISO 27001 and other cyber security standards In-depth knowledge of cyber-attacks, threat vectors, risk management and security concepts Experience in driving security projects
• Key Responsibilities Credible team management and project management capabilities Improve perimeter defense solutions in the environment as per agreed architecture with the following solutions: Firewall, Web Gateway, Cloud Security, WAF, NIPS etc. Provide strategic direction to SOC team and organization for security posture improvements. Manage centralized incident response management, continuous and proactive monitoring and preventive maintenance. Oversee deployment and continuous improvement of: Security Operations, Threat Management processes, Security technologies, Automations and integrations. Research emerging threats, publicly disclosed vulnerabilities or attack vectors and proactively push mitigating controls to services. Maintain proficient knowledge of organization’s controls, roadmap and service architecture. Oversee Cloud Security assessment and posture management. Prepare and deliver meaningful metrics representative of the Security Operations and Threat Management programs. Improve implementation of security processes in compliance with: ISO 27001, Aadhaar Act, IT Act. Provide technical security expertise to other departments with the organization including: IT teams, Software development and Operations teams. Develop strong relationships with external auditors and key stakeholders to ensure risk management oversight is understood, managed appropriately and current with all standards, guidelines and regulations that are applicable. Release information security metrics to stakeholders regarding compliance levels Perform any other related duties as required or assigned.