Agm-security Assurance

Job Req ID: 46175
- Location: Mumbai, IN
- Function: Technology/ IOT/Cloud
- About:

- Vodafone Idea Limited is an Aditya Birla Group and Vodafone Group partnership. It is India’s leading telecom service provider. The Company provides pan India Voice and Data services across 2G, 3G and 4G platform. With the large spectrum portfolio to support the growing demand for data and voice, the company is committed to deliver delightful customer experiences and contribute towards creating a truly ‘Digital India’ by enabling millions of citizens to connect and build a better tomorrow. The Company is developing infrastructure to introduce newer and smarter technologies, making both retail and enterprise customers future ready with innovative offerings, conveniently accessible through an ecosystem of digital channels as well as extensive on-ground presence. The Company is listed on National Stock Exchange (NSE) and Bombay Stock Exchange (BSE) in India.

We're proud to be an equal opportunity employer. At VIL, we know that diversity makes us stronger. We are committed to a collaborative, inclusive environment that encourages authenticity and fosters a sense of belonging. We strive for everyone to feel valued, connected and empowered to reach their potential and contribute their best.

VIL's goal is to build and maintain a workforce that is diverse in experience and background but uniform in reflecting our Values of Passion, Boldness, Trust, Speed and Digital. Consequently, our recruiting efforts are directed towards attracting and retaining best and brightest talents. Our endeavour is to be First Choice for prospective employees.

VIL is an equal opportunity employer committed to diversifying its workforce.

**Role**

Security Clearance Officer - NW

**Job Level/ Designation**

AGM - Security Assurance

**Function / Department**

Technology Security

**Location**

Mumbai

**Job Purpose**
- Management of IT and Telecom domain Risk Score, Mitigation of identified risks. Reporting, follow up of risks periodically
- % completion of Security Assurance program for IT and Telecom
- Regular ESIM security check

Responsible for risk assessment, evaluation, and implementation of compensatory/mitigation controls for IT, Telecom and underlying Business units. Ensure proper management of vendor de-risking program, implement and manage Security Assurance program for VIL, ensure that the Risk Score of the organization is maintained and monitored on a continuous basis.

**Key Result Areas/Accountabilities**
- Manage and maintain cyber security risk posture (IT and IS process control related to risk) / compliance; periodic review and follow up of overdue, pending RAF
- Manage Vulnerability Assessment, Penetration Testing, Technical Controls Review on a periodic manner for IT, Telecom and its related assets.
- Identification, classification & assessment of critical IT and Telecom assets, Applications to identify risks associated with them and ensuring mitigation of the same for both internal assets & assets managed by third parties viz. vendors, partners etc.
- Implementation & maintenance of a Third-party vendor risk management framework to periodically assess critical vendors & partners of VIL, perform risk assessment and mitigation of identified risks, Track and monitor remediation plans prepared by the third party to closure, Review closure evidence provided to determine appropriate closure
- Development and implementation of MBSS, CR documents for new and existing IT and Telecom assets, Application
- Ensure on-time, quality and effective Security Gating Process by way of strong governance on assessment teams
- Verify and approve Firewall, Internet access, VPN access request, conduct proper security Architecture checks and zoning implementation
- Review and audit vulnerable critical assets timely
- Periodic governance of Supporting vendors and support Internal/ External audits
- ESIM security management
- Provide business centric KPI, Dashboard and Reports

**Core Competencies, Knowledge, Experience**
- 7 to 10 years’ experience in IT & security with a minimum of at least 3 years in IT network security management
- Bachelor’s degree in Computer Science, Engineering in Electronics, Cyber Security or related field; Master’s degree will be an added advantage

**Must have technical / professional qualifications**
- 7-10 years of full-time in Information Security Risk Management
- Hands-on experience on IT Security products, DLP, IDS, IPS, WAF, firewall etc,
- Security core technical expertise in Application security, network security, IT security architecture, Identity and Access Management.
- Decision making and problem-solving capabilities
- Vendor/partner management & governance
- Team management & leadership

**Vodafone Idea Limited** (formerly Idea Cellular Limited)
An Aditya Birla Group & Vodafone partnership