Home Credit - Principal/Senior Principal - Cyber Security (3-8 Yrs) Gurgaon/Gurugram (Others)

Overall: 3-9 Years Summary : Information Security executive proficient in monitor, review, analyse, assess and report the cyber risk incidents. The person will work in collaboration with Operational Risk Team and other business stakeholders to address security related tasks. This is a fast paced position requiring strong technical skills as well as strong judgement and decision making abilities. Job Responsibilities : - Performs incident handling process by maintaining knowledge in implementation of containment, protection and remediation activities.
-Provide timely identification, escalation, resolution, and follow-up for all critical incident Management cases - Develops cyber security processes and procedures, and supports service-level agreements (SLAs) - Analyze and evaluate security vulnerabilities, and manage security systems such as anti-virus, firewalls, patch management, SIEM, and Encryption technologies - Provides input in assessing and disseminating threats related to the enterprise in regard to current vulnerability by managing and developing an emerging threat model.
-Build and assess security policies for the OS, network, and database - Clear understanding of computer networks, protocols and technologies. (IP, domain, Checkpoint firewall, routers, HTTP, HTTPS etc.) - Coordinate security orientation and security awareness programs/trainings - Demonstrate awareness of cyber security trends, threats, vulnerabilities, including and especially those influencing the financial services industry and banking sector - Reviews alerts and data from security tools and documents formal, technical incident reports - Should have working knowledge of Operating systems, network and security architecture, backup and storage technologies.
-Assess, test and select new security products and technologies and identify integration issues - Collaborates with IS and IT Team members and other business teams to ensure daily security tasks and execution and closure of Security projects - Follow up on outstanding requests and ensure timely resolution within defined SLAs. Escalating to other internal and external teams as appropriate - Responsible for fetching security compliance reports like Patch Management, Anti-virus, MDM, SIEM, DLP etc.
-Responsible for building Standard Operating procedures for security tools and processed per industry best practices Desired Profile : - Minimum 3 years experience with technical security auditing and compliance - Experience in Operating Systems (Windows, Linux, Unix etc.) in the Information Security Domain.
-Proven experience in Security Incident Handling and Response - Experience with IT Security tools such as SIEM, DLP, Anti-Virus, Malware Detection, Web-Gateway, Email Filters, CheckPoint Firewalls is a plus - Ability to read and understand system data, including, but not limited to, security event logs, Netflow and database structures - Knowledge of TCP/IP and network administration / protocols / Cisco.
-Knowledge of Information Security Concepts and methodologies - Strong knowledge of desktop, server, application, and network security principles for conducting comprehensive business impact analysis and risk identification - Great attitude, independent, and takes ownership of all tasks from start to end.
-Excellent written and communication skills

Required Skills : English