Infosys - Group Project Manager - Cyber Security

Experience : 10 -18 years

Job Description:

- Strong technical expertise in cybersecurity technologies, including SIEM, IDS/IPS, endpoint protection, encryption, and identity management.

- Deep understanding of regulatory requirements and compliance standards relevant to the financial services sector (e.g., FFIEC, PCI DSS, GLBA).

Cloud Security Program Management:

- 10 - 12 years developing, leading, and delivering a cloud security program in a large, highly-regulated environment.

Cloud Security Tool Portfolio Management:

- 10-12 years experience in successfully implementing a comprehensive, enterprise-class cloud security tools portfolio, including CASB, CSPM, CWPP, CNAPP, and other relevant solutions.

Governance, Risk and Controls (GRC):

- 3-5 years demonstrating ability to work across lines of defense to define and drive the success criteria needed to guide execution as an enterprise control function in meeting the expectations from authoritative sources (e.g., NYDFS, GLBA, NIST, FFIEC).

1. Lead the development and maintenance of the technical IT/cyber capabilities:

- This includes all phases of the software development lifecycle and software stack which includes threat modeling of application designs, static application security testing (SAST), software composition analysis (SCA), dynamic application security testing (DAST), and penetration testing.

2. Policy and Strategy Implementation:

- Implement objectives and policies established by the SAA and CIO executive leadership; contribute to the formulation and execution of short- and long-term cybersecurity goals.

3. Develop and implement a holistic cybersecurity defense strategy:

- Strategy must be aligned with business objectives, regulatory requirements, and industry best practices.

4. Develop and lead a cloud security and technology transformation strategy:

- Build and drive a team of security architects and engineers focused on delivering security capabilities into the organizations CI/CD pipelines and hybrid, multi-cloud environment.

5. Collaborate with senior management across departments:

- Integrate Infrastructure and Identity security practices into the organizational fabric, fostering a security-first mindset, including Identity Governance, Access Management, MFA, Privileged Access Management, IAM Engineering, Customer IAM governance, email security, network security, endpoint protection, AI security, and perimeter security.

Certifications:

- Security certifications (e.g. CCNA Security, GSEC, GCED, GPPA, etc.)

- Technical Certifications (e.g. CCNA, RHCE, MCSE, etc.)

Note : For your candidature to be considered on this job, you need to apply necessarily on the company's redirected page of this job. Please make sure you apply on the redirected page as well.