IT Security Lead

Implementation of Zero Trust Framework. Manage cyber security operations. Raise the awareness level of employees about cyber security. Regular reporting & dashboards . Review the current IT & cyber security landscape, validate the current cyber security roadmap and make relevant changes as necessary. Evaluation, comparison, finalization and implementation of necessary tools, technologies and processes inline with Zero Trust framework. Assessment of current deployment and enhancement of Network Admission Control. Assessment of current deployment and enhancement of Privileged Access Management. Assessment of current deployment and enhancement of Identity & Access Management. Implementation of cloud security controls. Review the Operational Technology landscape & implementation of necessary tools & technologies for OT Security. Prepare comparative for decision making & enrollment. Assess the current policies and procedures. Do the gap assessment from ISO 27001 perspective. Revision of policies in accordance with ISO 27001, rollout of policies, adoption, adherence and Internal audits against the policies. Manage Cyber Security Operations. Get the vulnerability analysis and risk assessment performed regularly. Based on the assessment report, remediate the security issues using existing tools and technologies. Evaluation of available solutions in the industries to remediate the issues which can’t be fixed using the existing tools and technologies. Analyze architecture of application & infrastructure before any platform is brought into the ecosystem. Management & governance of cyber security operations handled by an outsourced agency. Regular monitoring & reporting of the health of Cyber Security. Ensure the adherence to the Security Policies and checklists before any application or platform is brought into the ecosystem. Manage Endpoint protection and Endpoint Detection & Remediation deployment & operations - ensuring complete coverage - installed on all endpoints and servers, updating prevention policies on a regular basis, Application whitelisting/blacklisting, vulnerability monitoring and reporting. Get the patching done on all endpoints and servers regularly based on the vulnerabilities detected by EPP and EDR tool, patches released by OEMs and other out of band patches. Define and document security Incident management process. Ensure the adherence to security Incident management process. In case of any security incident, immediate remedial action to be taken, regular updates to IT Leadership and management. Complete forensics of the incident to be performed, remedial action taken, root cause analysis done and corrective measures to be performed. Tracking and understanding emerging security practices and standards. Raise the awareness level of Employees about Cyber Security. Regular communication to the employees. Conduct employee trainings on good cyber practices. Regular reporting & dashboards. Monthly cyber security health report - Adoption and benefit realization against the investment made. Project plan and status for cyber security projects. 8-12 years of experience (manufacturing experience would be an added advantage). Technical knowledge on following technologies. Perimeter Firewalls - Cisco, Palo Alto, Fortinet. NAC - Cisco ISE, Forescout. SASE, CASB, CSPM, Cloud Security. PAM - CyberArk, Arcos. Extensive experience in information security and/or IT risk management with a focus on security, performance and reliability. Excellent written and verbal communication skills as well as business acumen and a commercial outlook. Ability to manage senior stakeholders.