Gm - Risk Assurance

Job Req ID: 40273- Location: Mumbai, IN- Function: Technology/ IOT/Cloud- About:

- Vodafone Idea Limited is an Aditya Birla Group and Vodafone Group partnership. It is India’s leading telecom service provider. The Company provides pan India Voice and Data services across 2G, 3G and 4G platform. With the large spectrum portfolio to support the growing demand for data and voice, the company is committed to deliver delightful customer experiences and contribute towards creating a truly ‘Digital India’ by enabling millions of citizens to connect and build a better tomorrow. The Company is developing infrastructure to introduce newer and smarter technologies, making both retail and enterprise customers future ready with innovative offerings, conveniently accessible through an ecosystem of digital channels as well as extensive on-ground presence. The Company is listed on National Stock Exchange (NSE) and Bombay Stock Exchange (BSE) in India.

Role

Risk Assurance (Telecom & IT)

Job Level/ Designation

M3

Function / Department

Risk Assurance/ Technology Security

Location

Mumbai

Job Purpose

Managing budgets for deploying new tools and processes. Ensure proper management of vulnerability management, implement and manage Security Assurance program for VIL, ensure that the Risk Score of the organization is maintained and monitored on a continuous basis.

Responsible for Risk Assurance function, To evaluate compensatory/mitigation controls for Telecom and underlying Business units.

Key Result Areas/Accountabilities
- Drive and support governance of VIPAM,
- Drive the compliance of URL Filtering, BAU Security, RAD, TNSCA, SOX, END POINT, Firewall integration, etc.
- Guide the various audits - Internal & External Security Audit (within SNOC ISO 20K), Other DOT Regulatory Compliances
- Ensure compliance on critical and 75% non-critical patching
- Drive closure of assessment (VA /PT gaps ) on time
- Review the KPIS of the enterprise security operation
- Patching and Compliance on Telecom Servers and Assets.
- Management of Firewall rules and Reviews.
- Drive forensic data investigation requirement.
- Drive operation KPI of reducing LAR and usb access.
- Derive innovative solution and tactical approach to manage business.
- Define measures to identify the Security Risks associated and implement timely migration plan. Sanitization of node before commercial GO Live.
- Ensure all privilege access to identified critical VIL Applications
- Guide all regulatory compliance, Secure Remote access compliance, End user security access and approvals
- Drive all Audit Support - Support in DOT UL, ISO 27001, ISO 20000, ICFR, internal audits in terms of UAM/ URL Filtering.

Core Competencies, Knowledge, Experience
- Proven track record as a team leader with an understanding of Telecom Security management practices.
- In-depth understanding of Networking Protocols and Architectures, Wired/Wireless telecommunications and networking protocols and architectures, Internet protocols, Encryption techniques, algorithms and approaches, Enterprise architecture (e.g. Active Directory, etc.), Virtualization technology and architectures, Cloud technology, approaches and architectures, Mass storage technologies (e.g. SAN, NAS, etc.), Experience at-least two of these technologies Windows Server, Sun Solaris, Firewall security, TCP/IP Network, Oracle DB.
- Expertise in the field of Telecom Security Audits & Assessments
- Vendor/partner management and governance
- Strong understanding of Indian Cyber Law, DOT MRSP security requirements and content filtering requirements.
- Worked not less than 5 years in Telecom security or similar field.

Must have technical / professional qualifications
- Relevant Experience in Telecom/IT Security, and Telecom Compliances
- Graduation/ BE / B. Tech (Computers/ Electronics & Telecommunications)
- CISA/CEH/CISSP/CISM/ ISO 27001 and other security standards

Years of Experience

8 - 12 plus + years in telecommunications

Industries to look from

Telecommunications & IT Security professional

Ideal Organizations to look from

Other TSP or vendor /partners of Telecom security practices.

Direct reports

Risk Assurance Head (Telecom & IT)

**Vodafone Idea Limited** (formerly Idea Cellular Limited)
An Aditya Birla Group & Vodafone partnership