Assistant Manager - Cyber Security

Responsibility

The position, inter alia, be responsible for the following:

• Assist in planning and implementation of organization-wide Business Continuity Management System (BCMS) in accordance with ISO 22301 Standard, and other relevant security standards,
• Evaluate compliance with respect to legal and regulatory requirement for information security.
• Ensure security controls on Cloud infrastructure by developing, rolling out and implementing Cloud Security policy and procedures.
• Ensuring implementation of security controls on the cloud infrastructure.
• Regularly monitor security controls on the cloud infrastructure
• Conduct thorough offensive testing on Android applications, web platforms, and network infrastructure to identify and mitigate vulnerabilities.
• Review and update information security polices, standards, procedures, guidelines and processes.
• Assis in employee awareness by imparting induction training, rolling out monthly mailers and awareness handbooks.
• Drive phishing and spear phishing simulation campaign across the organization. Ensure necessary reporting of these campaigns and employee awareness based on the campaign.
• Ensure regular security testing and monitoring of PNB Housing infrastructure.
• Ensure all vulnerabilities are promptly reported, adequately managed and timely closed for any new and existing infrastructure of PNB Housing
• Ensure evaluation of any new security products and ensure that PNB Housing data is securely managed.
• Suggest controls to manage and mitigate information security risks.
• Continuous monitoring of security incidents. Take remedial action to reduce the same.
• Conduct threat modelling to access overall security posture, document & report the findings and recommend remediation strategies

Competencies:

1. Good communication and writing skills.

2. High energy professional.

3. Technical & functional expertise

4. Attitude to learn

5. Knowledge of relevant legislative or regulatory requirements such as IT Act and associated Rules

6. Strong understanding of network protocols & security concepts.

7. Familiarity with VAPT tools ( Burp Suite, Kali Linux, Metasploit, Wireshark etc.)

8. Analytical skills