Job Summary: We are seeking a highly skilled CISO / Information Security Expert with a strong technical background in security tools, threat mitigation, and cybersecurity operations. This role focuses on hands-on security implementation, monitoring, and incident response. The ideal candidate should have deep expertise in security technologies, risk management, and compliance frameworks. Key Responsibilities: 1. Security Strategy & Leadership - Lead and oversee security operations, risk management, and compliance initiatives. - Establish and maintain security policies, frameworks, and governance. - Report cybersecurity risks and posture to the C-suite and Board of Directors. - Collaborate with IT, legal, compliance, and business teams to align security with operations. 2. Security Operations & Incident Response - Monitor, detect, and respond to security incidents using SIEM tools (e.g., Splunk, QRadar, ELK Stack). - Investigate security breaches, cyberattacks, and data leaks and implement remediation plans. - Conduct forensic analysis and log reviews to identify security threats. - Develop and enforce incident response playbooks. 2. Security Tools & Technologies - Deploy, configure, and manage security tools, including: - Endpoint Security (EDR/XDR solutions like CrowdStrike, SentinelOne, Carbon Black). - Network Security (Firewalls, IDS/IPS, Web Application Firewalls - Palo Alto, Fortinet, Cisco). - Identity & Access Management (IAM, PAM solutions like Okta, CyberArk, Azure AD). - CSPM (Prisma Cloud, AWS Security Hub, Microsoft Defender for Cloud) - Cloud Workload Protection (CWPP) (CrowdStrike, Trend Micro, SentinelOne) - Cloud Identity & Access Management (IAM/PAM) (AWS IAM, Azure AD, Google IAM) - Cloud Firewall & Network Security (AWS WAF, Azure Firewall, Cloud Armor) - Vulnerability Management (Qualys, Tenable, Nessus). - Threat Intelligence & SIEM (Splunk, QRadar, Microsoft Sentinel). 3. Security Compliance & Risk Management - Ensure compliance with security frameworks such as ISO 27001, NIST, CIS Controls, SOC 2, PCI DSS. - Conduct security risk assessments and penetration testing. - Perform regular security audits and vulnerability scans. 5. Security Awareness & Training - Conduct hands-on security training for IT teams and employees. - Provide real-world examples of security threats and attack simulations. Qualifications & Skills: 7+ years of experience in information security, cybersecurity operations, or network security. Proficiency in security tools like Splunk, CrowdStrike, Palo Alto, Qualys, CyberArk, AWS Security. Hands-on experience with SIEM, firewalls, IDS/IPS, endpoint security, IAM, and vulnerability management. Strong knowledge of security frameworks (ISO 27001, NIST, CIS, GDPR, SOC 2). Experience with incident response, forensics, and security investigations. Scripting and automation skills (Python, PowerShell, Bash) are a plus. Cloud security expertise in AWS, Azure, or GCP. Relevant security certifications (CISSP, CEH, OSCP, CISM, GCIH, AWS Security). Preferred Certifications: - CISSP (Certified Information Systems Security Professional) - CEH (Certified Ethical Hacker) - OSCP (Offensive Security Certified Professional) - CISM (Certified Information Security Manager) - AWS Certified Security Specialty - GIAC Security Certifications (GSEC, GCIH, GPEN, etc.)

Gurgaon/Gurugram

CISO/Information Security Expert 

Job Description for CISO/Information Security Expert  in ENTENTE SOLUTIONS LLP in  Gurgaon/Gurugram for (7-14) years of experience. Apply Now!