Protiviti - Manager/Deputy Manager - Cyber Security/Security Architecture

Cyber Security Review

The candidate is required to have deep technical knowledge and strong experience in carrying out security architecture consulting namely around for the following aspects of secure architecture review:

- Experience in review/audit of security architecture review at various levels:

Server architecture review:

- Server placement in network

- Zoning

- Authorized services permitted

- OS level security

- Physical console security

- Privileged rights and PAM integration

- Event sources triggers alerts in SIEM

Application architecture:

- Authentication security and MFA

- Identity management and integration with PAM

- API security

- Services security

- Secure code review and SDLC cycle adherence

- WAF linkages to internet facing applications

DB security

- DB table level security

- HA and tokenization

- File level security

- DB event logging

- DAM placement and event tracking

- Data backup and resilience

- I/O and response time monitoring controls

Network architecture:

- firewall placements

- network segmentation and zoning

- Micro segmentation

- Zero trust architecture

The candidate must have reasonable experience in configuring security features on O365 for the following elements:

- ATP

- AIM

- DLP (on components such as sharepoint, On driver, yammer)

- IAM

- PIM and IAM (MS products)

- Configuring logging for various Azure VMs, O365 services

- Integration to SIEM (MS Sentinel or other commercial SIEM vendors)

- Any experience in integrating 3rd party products to O365 cloud such as Symantec DLP, PIM/IAM solutions will be considered a plus

The candidate must have experience in conducting a pre-onboarding security posture assessment and post

The candidate is expected to have the following skills:

Sales Support

- Track the internet for RFP opportunities

- Conceptualize business proposals to be made for assignments

- Carry out and track RFP submissions

- Carry out internal risk clearance and management processes for client

- Assist senior management in research and writing technical white papers

Project Management and project execution

- Creation of project codes for time charging and expenses

- Project execution when plotted on individual contributor projects.

- Staffing of projects identification of resources available from resource pool

Management project on ground and deliver areas of project allocated

- Tracking time charged on projects

- Oversee activities and work with project team members on a hands on model to ensure quality delivery

- Be the first point for client for status update meetings and project escalations

- Build project presentations and audit reports

- Discussions of draft audit report for stakeholder buys in (in case of audit assignment)

- Attend audit committees

- The candidate is expected to have excellent analytical skills and report writing skills to ensure that deliverables for all assignments are well accepted by the clients.

- The candidate is also expected to have excellent presentation making skills to ensure that report summaries are made into succinct theme based presentations to senior management.

- The candidate may be required to travel for short to long term assignments depending on client requirement.

- Must have been in a client facing role in addition to a technical role.

- Must have managed mid-level stakeholders at client (VP level, CISO, and Audit leads)