Senior Manager - Cyber Security - Banking & Finance Domain

1: Job Purpose Statement (Summarize in one/two statements why this job exists, and the contribution makes to the overall business of the company).

As per the master circular issued by RBI for NBFCs, The information security function should be adequately resourced in terms of the number of staff, level of skill and tools or techniques. In light of the guideline, the cyber defense role has been created to fill skill gap in the existing structure.

2: Duties & Responsibilities (List in the order of importance the duties & responsibilities of this job )

This role will be responsible for all aspects of the Cyber Defense practices, including Next Generation SOC, Threat Hunting, Incident Response/Automation, Threat Intel, Malware, SIEM use case engineering, MIRTE, SOC design related to NIST or other frameworks, security data lake for structured/unstructured data, and other emerging SOC technical security aspects.

The incumbent should have the following:

Strong experience on security operation processes using tools like IBM QRadar, Splunk or other SIEM tools. Monitoring, Management, Dashboarding etc.

- Strong understanding of attack vectors in hybrid environment and mitigation of the same. Advanced experience in managing SIEM projects involved with designing, architecting implementation and operationalizing the solution for different environments like OnPrem DC, Azure, AWS, Google Cloud etc.

- Experience in managing major security incidents. Ability to lead a team, inhouse or partner location with broad information security knowledge of common attack methodologies.

- Experience in technologies like Network IDS IPS, Syslog, Proxy, WAF, PAM, Firewall, EDR, XDR, SOAR.

- Should remain current with new and emerging technology, government/policy impacts and industry best practices

3: Key Challenges (List the key tasks performed to support the main objectives of the positions), Performed the skill mapping in the existing structure, referred the guidelines.

4: Decision Making Authority (Describes the type of decisions made alone, those on which the manager must be consulted, those referred to a higher level, and job procedures to be followed).

The person will be take the decision on the identifying and fixing various cyber threats.