Domain Manager

Job Purpose
The Security Configuration Analyst supports designing, creation, review, and continuous improvement of Security Configuration Documents (SCDs) across enterprise systems, applications, and infrastructure. This role assists in documenting secure configuration baselines, validating configurations, and ensuring alignment with industry standards, regulatory requirements and BFL security policies, reducing risk and enhancing system hardening.
Duties and Responsibilities
1.SCD Documentation Support

• Assist in developing Security Configuration Documents (SCDs) for - Operating systems, Network devices, Cloud environments (Azure, AWS, GCP), Databases, Middleware, and Applications
• Followed baseline configurations based on - CIS Benchmarks, NIST guidelines and OEM best practices
• Ensure Clear, structured, and standardized documentation of SCDs
  2.Review Validation
• Support periodic SCD Reviews/Audits
• Track and ensure closure within the TAT
  3.Governance Compliance Support
• Ensure SCDs align with - BFL security frameworks Regulatory requirements
• Support internal and external audits related to SCDs
• Track and manage exceptions and risk acceptances
  4.Continuous Improvement
• Regularly review and update SCDs to reflect - Emerging threats, Vulnerabilities and Technology changes
• Incorporate lessons learned from - Security incidents, VAPT and audits
  5.Collaboration Stakeholder Engagement
• Work with IT Teams (IT Infrastructure/CoE, DevOps/Cloud teams, Application Support, InfoSec Compliance, Data Privacy, SOC, Endpoint Security, Network, Database and Middleware etc.
• Work with IT Compliance
• Work with Corporate Audit
• Ensure closure of regulatory observations and avoid recurrence through continual improvements
  6.Automation Documentation
• Support automation of SCD enforcement using - Configuration Management and various Security Tools
• Maintain central repository of SCDs and templates

Key Decisions / Dimensions

• Accuracy and periodic updates of the inventory used for SCDs
• Closure of gaps identified and relevant documentation

Major Challenges

• Following document standardization across the IT landscape
• Timely completion of reviews and closure of all Secure Configurations
• Exception handling and relevant documentation

Required Qualifications and Experience
a)Qualifications

• Post-Graduate or Graduate with 2-3 years of experience in Security Configurations (Security baselines/hardening standards, Audit and Compliance Management) preferably in NBFCs, Banks, Fintech or regulated financial institutions.

  b)Work Experience
  Technical Skills:

• Basic understanding of - System hardening, Secure configurations, OS, Network, Cloud, Databases, Middleware, SOC, Endpoint Security and Applications

• Awareness about frameworks - CIS Benchmarks, NIST (800-53, 800-128), ISO 27001 controls and RBI requirements

• Fundamental understanding of Vulnerability management tools, Configuration/Security tools

• Basic scripting knowledge
  Soft Skills:

• Strong documentation and writing skills

• Analytical and risk-based thinking

• Communication and Collaboration

• Ability to follow the structure process and bring continuous improvements

• Timely updates to Sr. Team members