VP-Cyber Defense & Incident Response

Role - Head - Cyber Defense & Incident Response (M4)

Role Contour: Responsible for detection, triage, analysis, response and recovery from suspicious events and security incidents to maintain appropriate intelligence posture for VIL.

Accountability:

\n
• Overseeing monitoring and co-relation of log events across IT infrastructure including security devices, network devices, applications, operating systems etc.
\n
• Designing standard response procedures for security incidents, ensuring post-review of priority 1 and 2 incidents, following defined escalation path when needed, as defined in the escalation policy, etc.
\n
• Performing blue team/red team exercises
\n
• Accountable to keep in pace with external threat intelligence and sharing leads with the architecture team for developing strategy and procuring security solutions to address the gap
\n
• Ensuring response to and recovery from security incidents, performing problem management, root cause analysis, developing after action reports for high-profile, high-impact incidents, sharing timely communication with relevant stakeholders and follow-up through closure of gaps and inconsistencies
\n
• Performing forensic analysis and supporting investigations (includes interfaces with law enforcement)
\n
• Conducting hackathons/ bug bounty programmes to identify potential gaps in information security architecture; working closely with Anticipatory Security Architecture team for closure of those gaps
\n
• Leading and managing threat intel activities to ensure appropriate intelligence posture for future incidents
\n
• Creation & maintenance of relevant SOPs, protocols, policies and other internal documents; ensuring these are reviewed and updated on a timely basis and appropriate information is shared with relevant stakeholders in a timely manner
\n
• Compliance to all applicable regulatory and law enforcements/requirements, managing all the information.
\n
• Managing the interaction with DOT/NCIIPC/CERT-in etc for intel advisory and Incident response related activities.
\n

Experience & Qualifications:

\n
• 20+ years exposure working in IT & Security, with minimum of 8 to 10 years in IT Security Management
\n
• Strong in Governance, Partner Engagement, team handling
\n
• Bachelor’s degree in Engineering, Cyber Security or related field
\n
• Certifications: CISSP/CCSP/CISA/CISM
\n

Dimensions:

\n
• % adherence to SLA for resolving incidents based on incident categorization 99%
\n
• Number of cyber drills participated in and the ability to identify all test cases – Twice in Year
\n

Technical Competencies:

\n
• Understanding of Network and System administration
\n
• Building logic and algorithms
\n
• Understating of SIEM & other security tools like AV, DLP, EDR, Proxy etc.
\n
• Understanding security systems & appliance like. NIPS, DODOS, Firewall
\n