IDBI Capital Markets

ORGANISATION IDBI Capital Markets & Securities Limited

Position IT Cybersecurity Professional (Cadre: Deputy Manager / Manager)

NO. OF VACANCIES 1

EXPERIENCE RANGE - 5 - 7 years of experience in cybersecurity, preferably in the financial services or brokerage industry.

REPORTING to Head Information Technology

LOCATION : Cuffe Parade, World Trade Centre.

ESSENTIAL QUALIFICATIONS Ideal candidate should be a Bachelor in Computer Science or a Bachelors degree with additional qualifications in Information Security from a well recognized Institution / Industry Association, or related field (or equivalent work experience) or other relevant industry standard certifications.

Technical Proficiency in Security tools (SIEM, firewalls, IDS/IPS, antivirus, etc.).

- Strong understanding of network protocols, etc. and common attack vectors.

- Knowledge of malware analysis, phishing attacks, and other social engineering techniques.

- Should have worked on Information / Cyber security related Governance for at least 2-3 years.

Certifications from recognized industry Associations / Institutions ( not Certified Information Systems Security Professional (CISSP)

- Ethical Hacker (CEH)

- CompTIA Security+ or CCNP

- Certified Information Security Manager (CISM)

- CISA

JOB DESCRIPTION / RESPONSIBILITIES

Job Cyber Security Execution Expert will play a pivotal role in protecting the organizations systems, data, and networks from potential cyber threats. This is a mid-level role, and the ideal candidate will have a strong understanding of security frameworks, threat detection, and risk management. The role will continue to evolve and will involve implementing practical, proactive measures to protect sensitive financial data and ensure that our systems are compliant with industry regulations and up to the mark to tackle evolving threats and scenarios. The candidate will be expected to support IS related Governance

Key Responsibilities:

Will include setting up Governance, Monitoring and Management of,

Threat Detection & Monitoring:

- Set up tools to enhance the network traffic monitoring, maintenance and analysis of logs, monitoring of endpoints, identify and respond to and create response mechanisms to alerts, unusual or malicious activities.

- Utilize security tools to identify, track, and report on potential vulnerabilities and threats.

Incident Response:

- Lead and participate in incident response activities to quickly identify, assess, and mitigate security breaches or attacks; modify and put in place SOPs if required.

- Arrange to preserve and provide forensic data for further analysis and support during the investigation of cyber incidents.

Risk Management:

- Conduct risk assessments to identify potential security gaps and develop mitigation plans.

- Recommend and implement strategies to minimize risks associated with cyber threats.

Security Architecture & Implementation:

- Assist in designing, modifying and implementing security solutions for both internal and client-facing platforms, networks, endpoints.

- Monitor and maintain configurations, set ups for firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), WAF, and other security-related technologies.

Compliance & Reporting:

- Ensure improve compliance with relevant industry regulations (e.g., SEBIs CSCRF) and internal security policies.

- Assist with the creation and maintenance of security documentation, including policies, procedures, and reports / reporting mechanism.

Security Awareness & Training:

- Support the development of cybersecurity awareness programs to educate employees on safe practices and emerging threats.

- Conduct training and workshops for staff to improve their understanding of security best Work closely with other departments, including IT, legal, and compliance, to ensure a holistic approach to cybersecurity.

- Collaborate with external vendors and partners to evaluate and implement security technologies.

SKILLS AND TRAITS

- Strong problem-solving skills, lateral and out of the box thinking and the ability to work under pressure.

- Excellent communication and collaboration skills with both technical and non-technical teams.

- Detail-oriented with the ability to identify and address security vulnerabilities.