Agm - Technology Security

Job Req ID: 45972
- Location: Mumbai, IN
- Function: Technology/ IOT/Cloud
- About:

- Vodafone Idea Limited is an Aditya Birla Group and Vodafone Group partnership. It is India’s leading telecom service provider. The Company provides pan India Voice and Data services across 2G, 3G and 4G platform. With the large spectrum portfolio to support the growing demand for data and voice, the company is committed to deliver delightful customer experiences and contribute towards creating a truly ‘Digital India’ by enabling millions of citizens to connect and build a better tomorrow. The Company is developing infrastructure to introduce newer and smarter technologies, making both retail and enterprise customers future ready with innovative offerings, conveniently accessible through an ecosystem of digital channels as well as extensive on-ground presence. The Company is listed on National Stock Exchange (NSE) and Bombay Stock Exchange (BSE) in India.

We're proud to be an equal opportunity employer. At VIL, we know that diversity makes us stronger. We are committed to a collaborative, inclusive environment that encourages authenticity and fosters a sense of belonging. We strive for everyone to feel valued, connected and empowered to reach their potential and contribute their best.

VIL's goal is to build and maintain a workforce that is diverse in experience and background but uniform in reflecting our Values of Passion, Boldness, Trust, Speed and Digital. Consequently, our recruiting efforts are directed towards attracting and retaining best and brightest talents. Our endeavour is to be First Choice for prospective employees.

VIL is an equal opportunity employer committed to diversifying its workforce.

Role

Lead - Risk & Governance

Job Level/ Designation

(M2) AGM

Function / Department

Technology Security (IT & Telecom)

Location

Mumbai

Job Purpose
- This position would be required to ensure effective management of cyber risks across IT, digital, network & other enterprise functions. Also, to ensure effective governance of the Technology Security function
- Responsible for maintaining and monitoring the organization's information security compliance by enforcing KPIs and SLAs across key security functions, including SOC, SecOps, Risk Assurance, Compliance & Data Privacy.
- This role also involves conducting risk assessments, implementing mitigation controls, managing vendor de-risking programs, and driving the Security Assurance program to maintain the organizational risk score and align with business objectives.

Key Result Areas/Accountabilities

**Security Governance**
- Define and implement cybersecurity strategies, policies, and procedures to strengthen overall security governance and ensure alignment with organizational objectives.
- Plan and conduct governance forums at both working and leadership levels, ensuring systematic closure of actionable items and effective management of stakeholders.
- Oversee partner and OEM governance through regular reviews of KPIs, KCIs, and SLAs, driving improvements in the GRC domain to enhance security compliance.
- Support the implementation of GRC process and project automation initiatives to optimize security operations and compliance efforts.
- Track the performance of the security vertical to ensure optimal resource utilization and identify improvement areas.
- Prepare and present functional updates, including security-related presentations, to senior management and leadership teams.
- Ensure adherence to regulatory compliance and reporting requirements for bodies like NCIIPC, DOT, CERT-In etc.
- Engage with internal and external auditors, regulatory bodies, and government forums, providing necessary reports and evidence to meet compliance standards.
- Governance of unauthorized software’s & Risky firewall rules
- Oversight of Third-party vendor risk management
- Support Security Technologies Inception which included preparing SOWs, business cases, and technical evaluations for new or enhancement in technologies.

**Risk Assurance & management**
- Provide business-centric KPIs, dashboards, and reports to track security performance, compliance, and risk posture, ensuring continuous improvement and alignment with organizational goals.
- Manage and maintain cyber security risk posture (IT and IS process control related to risk) / compliance; periodic review and follow up of overdue, pending RAF
- Track for closure of Vulnerabilities (IT, Telecom and Digital), Penetration Testing, and Technical Controls Review on a periodic manner for IT and its related assets.
- Identification, classification & assessment of critical IT assets, Applications to identify risks associated with them and ensuring mitigation of the same for both internal assets & assets managed by third parties viz. vendors, partners etc.
- Implementation & maintenance of a Third-party vendor risk management framework to periodically assess critical vendors & partners of VIL, perform risk assessment and mi