Manager Cyber Security - VAPT

Reporting Structure Reports to Senior Manager – VAPT Education · University degree in the field of computer science or IT. Experience/ Qualifications · 8+ years of Information Security background is essential. · 5+ years of Penetration testing, Red teaming and or vulnerability assessment experience · Experience in evaluating the control environment through Ethical Hacking, Penetration Testing, Red Team assessments. · Evaluation of security technologies to detect vulnerabilities · Hands on experience in black-box, grey-box penetration testing on platforms like .Net, Java etc. · Hands on experience on mobile testing of android and IOS · A high-level appreciation of Security Architecture and Infrastructure · Should be familiar with the best practices of OWASP, SANS Institute, ISACA, GAO, FISCAM, NSA, NIST, Internet Engineering Task Force (IETF) · Develop a framework to test compliance of applications / systems. · Experience in project management Industry · Information technology Responsibilities · Conduct internal / third-party Ethical Hacking / Vulnerability Assessment / Penetration Testing, Red Team assessment on business-critical assets and processes. · Liaison with external ethical hacking / penetration testing for RBI projects · Coordinate with security intelligence framework to obtain latest threats & vulnerabilities · Prepare security effectiveness reports for management Testing the applications / systems for compliance to RBI / ReBIT Information Security practices Ensure new applications are inducted into Data centre after conducting pen testing / vulnerability assessment · Prioritizing security vulnerabilities identified in ethical hacking, penetration testing and application / system testing based on business impact and update Security operations team for mitigating them · Follow up on closure of these gaps and escalate when necessary · Deciding the most relevant and applicable metrics for measuring security effectiveness and deciding on the requisite algorithms for their quantification Certifications (any two) CISSP CEH / OSCP / OSCE / GPEN