Security Operations Manager

Company Description

Contevolve is a leading IT services company dedicated to delivering innovative and customized solutions to support business growth. Our team of seasoned professionals aligns IT strategies with business goals, streamlines operations, and enhances customer experience to keep clients competitive. Contevolve is ISO/IEC 27001:2022 and ISO 9001:2015 certified, showcasing our commitment to information security and high-quality service delivery. We specialize in software development, IT support, AI/ML, data science, cloud migration, IT security, and testing services.

Location: Noida

Experience: 8+ years

Department: Operation/ Security

Reports To: Operation Director

Job Summary:

The Security Operational Manager is responsible for overseeing the day-to-day operations of the organization's security infrastructure. This role involves managing the security operations center (SOC), leading incident response efforts, and ensuring the effectiveness of security policies, procedures, and protocols. The Security Operational Manager will collaborate with various departments to safeguard the company's information assets and maintain a robust security posture.

Key Responsibilities:

• Manage Security Operations:
   Oversee the daily activities and operations of the security operations center (SOC), ensuring continuous monitoring, detection, and response to security incidents.
• Incident Response:
   Lead the incident response team in identifying, managing, and resolving security breaches and vulnerabilities. Conduct post-incident analysis and reporting to prevent future occurrences.
• Security Monitoring:
   Implement and maintain security monitoring tools and technologies to detect and respond to threats in real-time.
• Penetration Testing and Vulnerability Scanning:
   Conduct regular penetration testing and vulnerability scanning to identify and mitigate security weaknesses within the organization's systems and applications.
• Policy and Compliance:
   Develop, enforce, and update security policies, procedures, and protocols in alignment with industry standards and regulatory requirements. Ensure compliance with relevant laws and regulations.
• Team Leadership:
   Tain, and mentor the security operations team, fostering a culture of continuous improvement and professional development.
• Risk Management:
   Conduct regular security risk assessments and implement mitigation strategies to reduce identified risks.
• Collaboration:
   Work closely with IT, legal, and other departments to ensure comprehensive security measures are integrated into all business processes.
• Reporting:
   Prepare and present regular reports on security operations, incidents, and compliance status to the Customers.
• Emergency Response:
   Develop and maintain emergency response plans for security incidents, ensuring the organization is prepared for potential crises.

Qualifications:

• Education:
   Bachelor's degree in Computer Science, Information Security, or a related field..
• Experience:
   Minimum of 7 years of experience in information security, with at least 3 years in a managerial role overseeing security operations.
• Certifications:
   Relevant certifications such as CISSP, CISM, CEH, or similar are highly desirable.
• Technical Skills:
   Proficient in security technologies such as SIEM, IDS/IPS, firewalls, antivirus software, and endpoint protection. Expertise in conducting penetration testing and vulnerability scanning.
• AWS Expertise:
   In-depth knowledge and experience with Amazon Web Services (AWS) security practices and tools.
• Knowledge:
   In-depth understanding of security frameworks (e.g., NIST, ISO 27001), compliance requirements (e.g., GDPR, HIPAA), and incident response best practices.
• Leadership:
   Strong leadership and team management skills with the ability to motivate and guide a diverse team.
• Communication:
   Strong verbal and written communication skills, with the ability to convey complex security issues to non-technical stakeholders.

Working Conditions:

• The role may require occasional on-call work to address security incidents.
• Must be able to work in a high-pressure environment and handle multiple tasks simultaneously.