AVP - Insider Thread Lead - Bank

- Define and Manage processes around insider threat management - Manage Insider Threat Monitoring program by ensuring processing security alerts generated by the various monitoring tools and technologies operated by the team in order to identify potential instances of data loss / exfiltration and other activity which may pose a potential Insider Threat risk.

- Owner of the Inder threat team which processes the security alerts in relation to potential data loss / exfiltration within prescribed timelines/ SLA

- Escalation of security alerts for review by business line management, seek response and validate vis-a-vis SBI card information security policies and allowed security practices

- Escalation of security incidents alerts to SBIC Compliance Team & Co-ordination with them for presentation in the steering committees for formal review and decisioning on the Disclipinary actions

- Feedback to the DLP(Data Leak prevention) Team basis review of the Alerts, Incidents identified as per the exisiting DLP rules. Additionally, review the classification of alerts raised on a perodic basis to decrease false positives.

- Research and provide suggestions for new DLP rules basis discussions with various business teams

- Lead maintain staff related security incidents which could indicate a potential Insider Threat risk, and maintain detailed trackers for incidents witnessed and actions taken

- Provide inputs to the Enterprise risk management committee(ERMC)/Information Security Committe(ISC) as per the prescribed frequency regarding incidents and actions taken on incidents

Program Management:

'- Requires experience leading both people and process which includes managing Tasks pertaining to Data Discovery, Information Classification, process improvements and alignment with various information security programs

- Develop business cases for Insider Threat Programme, and set priorities based on risk assessment

- Manage communication with business managers regarding DLP alerts/ incidents, respresent Infomation Security in DLP incident steering committee meetings

- End to end tracking of Insider threat alerts and incidents, including disclipinary actions taken by resposible business/ Human resource/ legal function

- Interface with various business functions and project managers

- Facilitate meetings including daily stand-ups, issue resolution, and project status meetings.

- Prepare, operationalise the relevant Alert/ Incident metrics, as part of the overall infosec function.

- Successful development and monitoring of the Data Privacy programme

- Promote a Positive Work Culture. Promote commitment, trust and engagement between them and their workforce.

- Manage staff to achieve high level performance whilst ensuring their personal wellbeing.

- Setup and Increase in maturity of Data Privacy Programs (Adoption & Capabilities)

- Delivery of project plans, milestone updates, presentations, assessment reports and communications to senior management and other relevant stakeholders.  

Skills set Required :

 - Expert knowledge and in-depth understanding of Log management and processing

- Well versed with technologies like SIEM, SOC, DLP, UAM

- Experience in a similar type of role in a multinational business, governments and industry bodies,

- Experience in managing data incidents and breaches

- Knowledge of cybersecurity risks and information security standards

- Experience in the private banking industry useful,Understanding of regulatory data privacy compliance, IT security or audit background is must

- Experience in managing data privacy incidents, investigations and breaches

- Experience in the private banking industry useful

- Monitor marketplace trends and experiences on security, audit and control issues.

- Understand security controls from a people, process and technology perspective.

- Should be familiar with standard secuirity processes and guidelines.

- Ability to interact and work with various senior stakeholders. Manage congruent relationships among different teams.

- Excellent written & verbal communication & presentation skills.

- Ability to lead, collaborate, challenge and influence peers. Passion for project based execution and process improvement.

- Excellent Documentation, Communication, presentation, interpersonal and leadership Skills