Manager - Information Security Risk Management (VAPT)
2 months ago
Job Summary
The successful applicant will be responsible for assessing the security posture of existing and proposed systems, platforms, and processes to protect and continually improve the confidentiality, integrity, and availability of information systems in accordance with the MLI’s business
objectives, regulatory requirements, and strategic goals.
Key Responsibilities
- Provide innovation within the context of the Vulnerability and Penetration Testing (VAPT) program in relation to both process and technology.
- Design, implement, and support VAPT solutions identified as necessary for the protection of organization’s assets.
- Serve as a Subject Matter Expert (SME) for the VAPT function.
- Serve as the system owner for common VAPT toolsets, platforms, and processes.
- Assess the sufficiency of policies, standards and procedures relative to VAPT best practices. Author standards and procedures designed to continually improve security posture.
- Perform authorized attack surface reviews and penetration tests against specific targets at the direction of the CISO
- Provide input into security risk assessments by leveraging specialized knowledge.
- Work with DevSecOps team for continuous analysis and improvement.
- Report compliance failures to management for immediate remediation.
- Mentor junior members of the VAPT group and provide constructive consultation to other peer groups such as IT Development.
- Assisting the Chief Information Security Officer in the fulfilment of responsibilities
Measures of Success
- Ensure quality and timely VAPT execution in line with industry best practices
- Compliance to regulatory obligations
- Improving operational efficiency and knowledge within the IS team
Key Competencies / Skills Required
VAPT, Configuration Reviews, Network Architecture reviews, Ethical Hacking
Desired qualification and experience
- Graduate/Post Graduate degree in Information management and security (pref. B. Tech/M.Tech/MS)
- 5+ years of professional experience in information security with a focus on vulnerability assessment and penetration testing.
- Extensive experience with common automated VAPT tools such as Nessus, Appscan, Burp Suite, Nipper etc. Proficiency with other common attack tools and frameworks such as Wireshark, Kali, and Metasploit, etc.
- Ability to validate the presence of identified vulnerabilities with accuracy.
- Must have the ability to perform targeted penetration tests without use of automated tools.
- Capable of providing assistance with the preparation of internal training materials and documentation.
- Passionate in the practice and pursuit of VAPT excellence
- Knowledge of cloud technologies and cloud hosting (nice to have)
- Relevant certifications CEH, ECSA, OSCP, OSCE is an added advantage
- Strong Communication skills
-
Max Life Insurance Company Limited | Manager
2 months ago
gurugram, India Max Life Insurance Company Limited Full timeJob SummaryThe successful applicant will be responsible for assessing the security posture of existing and proposed systems, platforms, and processes to protect and continually improve the confidentiality, integrity, and availability of information systems in accordance with the MLI’s businessobjectives, regulatory requirements, and strategic goals.Key...
-
Max Life Insurance Company Limited | Manager
2 months ago
gurugram, India Max Life Insurance Company Limited Full timeJob Summary The successful applicant will be responsible for assessing the security posture of existing and proposed systems, platforms, and processes to protect and continually improve the confidentiality, integrity, and availability of information systems in accordance with the MLI’s business objectives, regulatory requirements, and strategic goals. Key...
-
Information Security Manager
1 week ago
Gurugram, India Saras AI Institute Full timePosition Overview:The Information Security Officer (ISO) will be responsible for developing, implementing, and overseeing a comprehensive information security program for the university. This includes policies, risk management strategies, incident response plans, and initiatives to protect sensitive data, systems, and infrastructure.Key...
-
Information Security Manager
1 week ago
Gurugram, India Saras AI Institute Full timePosition Overview:The Information Security Officer (ISO) will be responsible for developing, implementing, and overseeing a comprehensive information security program for the university. This includes policies, risk management strategies, incident response plans, and initiatives to protect sensitive data, systems, and infrastructure.Key...
-
Information Security Manager
1 week ago
Gurugram, India Saras AI Institute Full timePosition Overview: The Information Security Officer (ISO) will be responsible for developing, implementing, and overseeing a comprehensive information security program for the university. This includes policies, risk management strategies, incident response plans, and initiatives to protect sensitive data, systems, and infrastructure. Key Responsibilities: ...
-
Vapt(Vulnerability Assessment and Penetration
4 months ago
Gurugram, Haryana, India Right Advisors Private Limited Full timeExp:3-6 Yrs Budget - 18 LPA Location - Gurgaon(WFO) Profile: VAPT(Vulnerability assessment and Penetration Testing) Qualification: B.Tech/B.Sc/BCA **Key Responsibilities**: - Perform source code review, architecture review, configuration review assessment. - Conduct penetration tests to exploit identified vulnerabilities and assess the impact on the...
-
Information Security
3 months ago
gurugram, India VMock Full timeJob Summary:We are seeking a highly motivated Information Security & Compliance Manager to join our dynamic team at VMock. You will leverage your technical expertise and communication skills to ensure our information security program meets or exceeds industry regulations and standards while directly addressing client concerns and requirements. You will be a...
-
Information Security Engineer
9 months ago
Gurugram, India Serving Skill Full timeJob Description :- Candidate should be in Network Security. - Required knowledge of Cloud Security , SOC Experience , Data & application Security , Incident Management , Identity Theft , NIST , Baseline Security standards, Email Security.- Certification required related to cloud security , or like CISSP , OSCP , CCSP etc.- Experience in DLP and have...
-
Information Security
3 months ago
Gurugram, India VMock Full timeJob Summary:We are seeking a highly motivated Information Security & Compliance Manager to join our dynamic team at VMock. You will leverage your technical expertise and communication skills to ensure our information security program meets or exceeds industry regulations and standards while directly addressing client concerns and requirements. You will be a...
-
Information Security
3 months ago
gurugram, India VMock Full timeJob Summary: We are seeking a highly motivated Information Security & Compliance Manager to join our dynamic team at VMock. You will leverage your technical expertise and communication skills to ensure our information security program meets or exceeds industry regulations and standards while directly addressing client concerns and requirements. You will be...
-
Information Security
2 months ago
gurugram, India VMock Full timeJob Summary: We are seeking a highly motivated Information Security & Compliance Manager to join our dynamic team at VMock. You will leverage your technical expertise and communication skills to ensure our information security program meets or exceeds industry regulations and standards while directly addressing client concerns and requirements. You will be...
-
Information Security Engineer
10 hours ago
Gurgaon/Gurugram, India Serving Skill Full timeJob Description : - Candidate should be in Network Security. - Required knowledge of Cloud Security , SOC Experience , Data & application Security , Incident Management , Identity Theft , NIST , Baseline Security standards, Email Security.- Certification required related to cloud security , or like CISSP , OSCP , CCSP etc.- Experience in DLP and have...
-
Gurugram, Haryana, India Evalueserve Full time**Elevate Your Impact Through Innovation and Learning** We have 4,500+ talented professionals operating across 45 countries, including India, China, Chile, Romania, the US, and Canada. Our global network also extends to emerging markets such as Colombia, the Middle East, and the rest of Asia-Pacific. Recognized by Great Place to Work® in India, Chile,...
-
Transformative Learning Solutions
1 month ago
Gurugram, India Transformative Learning Solutions Full timeThe Information Security Manager is responsible for overseeing and implementing the organization's information security program to ensure the confidentiality, integrity, and availability of information assets. This includes leading ISO 27001 certification efforts, ensuring GDPR compliance, managing risk assessments, and developing security policies and...
-
Information Security Officer
8 months ago
Gurugram, Haryana, India Orange Full timeManage continuous assessment of security risks. - Define and promote security improvement plans and roadmaps. - Contribute to improvement and update of OINIS security policy. - Monitor and report compliance to security policies and action plans (audits, scans, penetration tests, KPI, document reviews). - Assess the sensitivity level of each project. - Define...
-
gurugram, India Saras AI Institute Full timePosition Overview:The Information Security Officer (ISO) will be responsible for developing, implementing, and overseeing a comprehensive information security program for the university. This includes policies, risk management strategies, incident response plans, and initiatives to protect sensitive data, systems, and infrastructure.Key...
-
gurugram, India Saras AI Institute Full timePosition Overview: The Information Security Officer (ISO) will be responsible for developing, implementing, and overseeing a comprehensive information security program for the university. This includes policies, risk management strategies, incident response plans, and initiatives to protect sensitive data, systems, and infrastructure. Key Responsibilities: ...
-
gurugram, India Saras AI Institute Full timePosition Overview: The Information Security Officer (ISO) will be responsible for developing, implementing, and overseeing a comprehensive information security program for the university. This includes policies, risk management strategies, incident response plans, and initiatives to protect sensitive data, systems, and infrastructure. Key Responsibilities: ...
-
Clix Capital
3 weeks ago
Gurugram, India Clix Cap Full timeJob Description :Strategic Leadership : - Drive the development and implementation of information security policies, standards, and practices. - Serve as a key advisor to senior management on security and data protection-related issues.Risk Management : - Identify, assess, and prioritize information security and data protection risks. - Develop risk...
-
Lead Engineer-Information Security
2 months ago
Gurugram, India Acuity Knowledge Partners Full timeAcuity Knowledge PartnersAcuity Knowledge Partners (Acuity) is a leading provider of bespoke research, analytics and technology solutions to the financial services sector, including asset managers, corporate and investment banks, private equity and venture capital firms, hedge funds and consulting firms. Its global network of over 6,000 analysts and industry...
