Technical Security Manager

Role & responsibilities :

Security Operations (SOC)

• Lead end-to-end SOC operations, including monitoring, detection, investigation, and response
• Perform alert triage, incident analysis, and root cause identification
• Ensure compliance with RBI incident reporting timelines and guidelines

2. Network & Infrastructure Security

• Design, implement, and manage network security controls (Firewalls, VPNs, WAF, IDS/IPS)
• Enforce system hardening, patch management, and centralized logging
• Conduct vulnerability assessments and ensure timely remediation
• Maintain network architecture documentation and baseline configurations
• Ensure compliance with data localization requirements

3. Cloud & Application Security

• Implement and monitor security controls across AWS/Azure environments
• Deploy IAM, CSPM, and workload protection solutions
• Integrate DevSecOps practices into CI/CD pipelines (SAST/DAST)
• Conduct application security assessments aligned with OWASP Top 10
• Secure APIs and application integrations

4. Threat & Vulnerability Management

• Manage the complete vulnerability lifecycle (identification to remediation)
• Conduct VAPT and red team exercises
• Maintain centralized vulnerability register and reporting
• Leverage threat intelligence for proactive risk mitigation

5. Identity & Access Management (IAM/PAM)

• Define and enforce IAM and PAM policies
• Implement MFA, least privilege access, and SSO controls
• Conduct periodic access reviews and entitlement audits
• Maintain audit logs for privileged access activities

6. Governance, Risk & Compliance (GRC)

• Ensure compliance with RBI, PCI DSS, and ISO 27001 frameworks
• Perform risk assessments and maintain the risk register
• Conduct vendor risk assessments (TPRM)
• Develop and maintain security policies, procedures, and SOPs
• Track risk mitigation and acceptance timelines

7. Incident Response & Business Continuity

• Maintain and periodically test the Incident Response Plan (IRP)
• Conduct incident simulations and tabletop exercises
• Lead post-incident reviews and corrective actions
• Ensure BCP and DR readiness as per defined RTO/RPO

8. Awareness, Documentation & Reporting

• Conduct security awareness and phishing simulation programs
• Maintain documentation for incidents, risks, vulnerabilities, and audits
• Develop dashboards and KPI/KRI reports for management

Preferred candidate profile :

Required Qualifications

• Bachelors degree in Cybersecurity, Information Technology, or related field
• 4–6 years of experience in cybersecurity operations and GRC
• Experience in RBI-regulated environments (Banking/FinTech mandatory)
• Strong understanding of RBI IT Framework, PCI DSS, and ISO 27001

Preferred Certifications

• CISM / CISA
• Security+ / CEH
• ISO 27001 Lead Implementer / Auditor

Technical Skills

• SIEM, EDR, and SOAR platforms
• Network security technologies (Firewalls, IDS/IPS, WAF)
• Vulnerability management tools
• Cloud security (AWS/Azure)
• Container and API security

Soft Skills

• Strong analytical and problem-solving abilities
• Effective communication and stakeholder management
• Proactive and structured approach to security
• Strong collaboration across cross-functional teams

Key KPIs / Deliverables

• Improved incident detection and response time (MTTD/MTTR)
• Vulnerability remediation within defined SLAs
• Timely closure of audit findings
• Optimization of SIEM alerts and use cases
• Compliance adherence across RBI, PCI DSS, and ISO 27001