Team Member - IRM-SUPPORT SERVICES-Information Risk Management Team

Kotak Mahindra Bank; Mumbai; On-site; INR 3,000,000 - 4,800,000; Full time

Job summary

Kotak Mahindra Bank in Thane/Goregaon seeks a Cyber Security Specialist focused on Data Protection to review and strengthen enterprise data protection controls across DLP, DRM, CASB, SSE, and SASE environments.

The ideal candidate will have 8+ years in information security, deep knowledge of data protection frameworks, cloud and API security, and experience conducting risk assessments and control evaluations for BFSI contexts.

Qualifications

• 8+ years of experience in Information Security with a strong focus on Data Protection and Data Security.
• Strong knowledge of DLP, DRM, CASB, SSE/SASE technologies and related security architectures.
• Experience in risk assessments, control evaluations, and gap analyses for complex enterprise environments.

Responsibilities

• Act as 2LOD subject matter expert for Data Protection, providing independent oversight of controls.
• Review and assess the effectiveness of DLP controls across endpoints, email, web, cloud, and collaboration platforms.
• Evaluate DLP policy coverage, detection logic, rule tuning, and false positive/negative rates.

Skills

Data Protection

DLP

DRM

CASB

SSE

SASE

Cloud Security

API Security

Security Architecture

Risk Assessment

Job description

Job Title: Cyber Security Specialist - Data Protection

Location: Thane /Goregaon

Job Type: Full-Time

Role Summary

We are seeking a Cyber Security Specialist with expertise in Data Protection technologies and controls within the Information Security team. The role will be responsible for reviewing, challenging, and assessing the effectiveness of enterprise data protection controls across DLP, DRM, CASB, SSE, and SASE environments, ensuring security risks are adequately identified, managed, and mitigated.

The ideal candidate will possess strong knowledge of data protection frameworks, enterprise security architectures, network security, cloud security, and API security fundamentals, with the ability to evaluate complex technology environments and identify control gaps and improvement opportunities.

Key Responsibilities

• Act as the 2LOD subject matter expert for Data Protection, providing independent oversight and challenge of implemented controls.
• Review and assess the effectiveness of DLP controls across endpoint, email, web, cloud, and collaboration platforms.
• Evaluate DLP policy coverage, detection logic, rule tuning, false positive/negative rates, and overall control effectiveness.
• Review and assess DRM and information protection controls. Assess the design and implementation of CASB, SSE, and SASE controls.
• Conduct security assessments of complex business and technology environments to identify data protection risks, control deficiencies, and remediation opportunities.
• Participate in security architecture reviews and provide recommendations for secure design and data protection requirements.
• Develop risk assessments, control review reports, and management recommendations for stakeholders and senior leadership.
• Support audits, regulatory reviews, risk assessments, and compliance initiatives relating to data protection and information security.

Required Skills & Experience

• 8+ years of experience in Information Security, with significant focus on Data Protection and Data Security.
• Strong understanding of new age DLP, DRM, CASB, Proxy, SSE solutions, Enterprise & cloud security architectures, network security concepts and controls, API security.
• Experience reviewing and assessing: - DLP policy design and effectiveness
• Detection methodologies and rule optimization
• Data classification and discovery controls
• Insider risk and data exfiltration controls
• Experience conducting security control assessments, architecture reviews, risk assessments, and gap analyses in complex enterprise environments.

Preferred Qualifications

• CISSP, CISM, CCSP, CCSK, or equivalent security certifications & solution certifications
• Experience within BFSI
• Strong stakeholder management, analytical, and report-writing skills.

Ideal Candidate

A data protection professional with strong expertise in DLP, DRM, CASB/SASE/SSE technologies and security control assessments, capable of independently evaluating the effectiveness of security controls, challenging existing implementations, identifying gaps, and providing risk-based recommendations to strengthen the organization's data protection posture.