Senior Delivery Manager

Job Purpose

• To Conduct periodic assurance assessments of core IT Security platforms, including:
  oEndpoint Security / EDR
  oNetwork Security (NGFW, WAF, IDS/IPS)
  oIdentity Access Management (IAM, PAM)
  oData Security DLP
  oVulnerability Management Patch Management
  oCloud Security Posture Management (CSPM)
• Validate design effectiveness and operating effectiveness of security controls.
• Identify control gaps, design weaknesses, and residual risks in deployed platforms.
• Ensure platform controls are aligned with:
  oRBI Master Direction on IT Governance, Risk, Controls Assurance (2023)
  oISO/IEC 27001
  oNIST CSF / NIST SP 800 series
• Review Methodology Risk Assessment
  oDefine and execute risk based review methodology for IT Security platforms.
  oPerform:
  Control maturity assessments
  Configuration and governance reviews (not day-to-day ops)
  Exception and deviation analysis
  oRate findings based on impact, likelihood, and regulatory criticality.
  oTrack remediation effectiveness and closure evidence.
• Governance, Reporting Metrics
  oPrepare Assurance Dashboards Management Reports, including:
  oControl coverage status
  Open / overdue security observations
  Recurring audit findings
  Platform assurance risk heatmaps
  oPresent assurance outcomes to:
  IT Leadership
  CISO / CIO office
  Risk Compliance forums
  oContribute to continuous improvement of IT Security governance framework.

Duties and Responsibilities
A-To Conduct periodic assurance assessments of core IT Security platforms

B-Ensure platform controls are aligned with regulatory requirements
Major Challenges

• To identify all compliance requirements
• Ensure platform controls are aligned with regulatory requirements

Required Qualifications and Experience

• Qualifications
• Engineering / Computer Graduate with 1014 years of total experience
• 5+ years in IT Security Assessment, Assurance, Risk, or Audit roles
• Prior experience in regulated BFSI environments strongly preferred
• Relevant Certifications like CISA/ISO 27001 LA
  a)Work Experience
• Strong experience in IT Security Assurance / IT Risk / GRC / IS Audit
• Deep understanding of security platforms: EDR, IAM/PAM, VM, Network Security, Cloud Security
• Proven experience handling RBI / REBIT / ISO audits
• Strong control assessment and documentation skills
• Excellent analytical, reporting, and stakeholder communication skills
• Good to Have
• Exposure to Upper Tier NBFC / Banking / Financial Services
• Familiarity with ServiceNow GRC / IRM
• Understanding of cloud security (Azure/AWS/GCP)
• Governance Practices across Datacenter, Cloud, Servers, Endpoints, Security Technologies, Application Database
• Good Written and Verbal Communication with Presentation Skills
• Good Team Player and sound in stakeholder management