Program Manager

Designation: Program Manager- Expert 6

Domain: Information Security Expert (Expert in Cyber Security)

Role Responsibilities:

• Application of Cyber laws, Cyber security tools, and techniques in managing security in large projects
• Consultation to various projects on matters of Application Security, Network Security, Data Security, Building Security, Information and Human Security
• Review of projects and application architecture from the perspective of cyber security.
• Consultation on the installation of cyber-ready infrastructure like APT devices, IPS, Firewalls, Gateway
• Performing cyber audits of large-scale applications
• Consultation and review of all aspects, and matters related to Cyber security in the organization.
• Liasoning with various agencies on matters related to cyber security, training, advisories.
• Conducting training and awareness sessions on Cyber Security
• Performing VAPT and simulation of cyber-attacks on the organization
• Preparing and executing the cyber response plan, and ensuring DC-DR security readiness
• Identify continuously the risks, propose/assess and follow-up mitigation measures; risks shall include quality risks, project management risks for example risks of project delays as compared to testing plan and any other risks to the program in meeting the desired outcome.
• Monitoring and coordination with the application development teams for end- to-end service delivery.
• Other related activities as assigned by CIT (PMU) from time to time.

Essential Qualifications *:

• Should hold a degree in Computer Engineering/Computer Science and Engineering/Information Technology/Electronics and Communication engineering/Electronics and Instrumentation engineering/Electrical engineering from a premier institution appearing in the latest NIRF ranking in the top 100 rank.
• Should bring in at least 10+ years of experience in domain of Information Security and Network architecture.
• Should have working experience in an IT organization with employee strength of more than 300 employees.
• Should have led information security of large projects in BFSI, Retail or government sector, with high transactional load.

Desirable Qualifications/Skills/Experience:

• Should possess certifications in cyber laws and cyber security management like CISM, CISA, CISSP, LALI, CRISC or above preferred.
• Expert knowledge and implementation experience of Information Security principles, policy enforcement, operating systems, web applications, and a high level of familiarity with malicious code uses, OWASP top 10, and common techniques used by hackers.
• Should have competent understanding of network and security related protocols, data protection laws, data protection impact assessment, cloud security controls, access control protocols, security design principles, standard best practices, and risk mitigation strategies.
• Thorough understanding of Network and Security BoQ and their implementation in IT infrastructure, CDN, and applications services such as DNS, HTTPS, TLS as well as security software defined systems
• Experience in network security like router, firewall, gateway, load balancer and other network component level security
• Management of NOC/SOC center, SIEM alert and event analysis, and Incident response system and processes.
• Experience in Endpoint detection and response, managing antivirus systems in large scale projects.
• Should possess knowledge of latest hardware tools related to Cyber Security
• Should possess knowledge of software tools like SIEM related to cyber security.
• Should possess knowledge of ISO 27001, NIST framework and relevant other industry standards.
• Should have held the position of leadership role in Information security in the current organization.
• Should be able to assess the security risks and challenges that can arise in public-facing large-scale projects that involve multiple agencies.
• Should have experience of conducting VAPT, Cyber audits, Cyber response execution in the project.
• Should be able to train, build a team of cyber experts in the organization.
• Strong communication and negotiation skills.

* The above criteria may be relaxed in case of the exceptional deserving candidates.

THE ABOVE ROLES REQUIREMENT HAVE BEEN ENVISAGED CONSIDERING THE CURRENT UNDERSTANDING OF THE PMU. THE REQUIREMENTS BEIGN DYNAMIC CAN BE MODIFIED IN FUTURE AND THE ROLES & RESOPONSIBILITIES OF THE PERSONNEL CAN BE MODIFIED ACCORD