Cyber Security Engineer

Role & responsibilities

The successful candidate shall be responsible for the following across multiple Business Units within PSA India:

• Lead and support cybersecurity?governance, risk management, and compliance programs, including IT security operations and risk assessments, to protect PSA Indias systems, business applications, and data against cyber threats.
• Develop, implement, and enforce cybersecurity policies, standards, and guidelines for?both IT and OT security environments?across all BUs.
• Strengthen cybersecurity readiness and resilience of the BUs by developing and managing a suite of security tools and services, e.g., vulnerability management systems, phishing exercises, red-teaming, bug bounty programs, etc.
• Work closely with?each BUs IT and business leadership?to understand unique risks and tailor cybersecurity controls accordingly.
• Work with Regional IT and BU IT to enhance cyber awareness capabilities via awareness tools, phishing training, cybersecurity circulars, and table-top exercises.
• Provide guidance, procedures, and control frameworks for cybersecurity matters across BUs.
• Track and report progress of cybersecurity initiatives, projects, and key risk indicators (KRIs) / key performance indicators (KPIs)?at BU level and consolidated level.
• Perform regular security assessments, gap analyses, and improvement planning based on compliance requirements?for each BU.
• Handle security incidents, including detection, response, resolution, and forensic investigation,?coordinating across BUs.
• Review system design (network design and application architecture) to identify IT security risks and recommend mitigation measures.
• Keep updated with the evolving information/cybersecurity landscape, regulations, and industry standards.

Skills and Experience

The successful candidate shall have some or all of the following skills and experiences:

• Degree (BSc or B.Tech) in Computer Science, Information Security, or a related field.
• At least 2 years of relevant experience in IT security, with strong focus on GRC and managing cybersecurity across multiple business units or locations.
• At least 1 year of system administration and/or network domains.
• Strong knowledge of industry best practices and frameworks pertaining to IT Controls, including ISO 27001/2, PCI-DSS, NIST, SOC2, etc.
• Understand infrastructure components and services of both on-premises and commercial cloud environments, such as AWS and Azure.
• Experience in supporting IT security incidents, security testing, and security operations.
• Proven ability to work with multiple business units, understand diverse risk profiles, and communicate cybersecurity requirements effectively to non-technical stakeholders.
• A cohesive, effective team player and communicator with a positive and eager-to-learn attitude.

Preferred candidate profile

• Good understanding of?OT security standards?(e.g., IEC 62443)
• CompTIA Security+,?CEH,?ISO 27001 Lead Implementer/Auditor, or equivalent.