Job Requirements • Your key responsibilities will include: • Implementation of Zero Trust Framework. • Get ISO 27001 certification for the organization. • Manage cyber security operations. • Raise the awareness level of employees about cyber security. • Regular reporting & dashboards Implementation of Zero Trust Framework: • Review the current IT & cyber security landscape, validate the current cyber security roadmap and make relevant changes as necessary. • Evaluation, comparison, finalization and implementation of necessary tools, technologies and processes inline with Zero Trust framework. • Assessment of current deployment and enhancement of Network Admission Control. • Assessment of current deployment and enhancement of Privileged Access Management. • Assessment of current deployment and enhancement of Identity & Access Management. • Implementation of cloud security controls. • Review the Operational Technology landscape & implementation of necessary tools & technologies for OT Security. • Evaluate the SIEM (Security information & event Management) tools and managed SOC (Security operations Center) offering available in the market. Prepare comparative for decision making & enrollment. Get ISO 27001 certification for the organization. • Assess the current policies and procedures. • Do the gap assessment from ISO 27001 perspective. • Revision of policies in accordance with ISO 27001, rollout of policies, adoption, adherence and Internal audits against the policies. Manage Cyber Security Operations. • Get the vulnerability analysis and risk assessment performed regularly. • Based on the assessment report, remediate the security issues using existing tools and technologies. • Evaluation of available solutions in the industries to remediate the issues which can’t be fixed using the existing tools and technologies. • Analyze architecture of application & infrastructure before any platform is brought into the ecosystem. • Management & governance of cyber security operations handled by an outsourced agency. • Regular monitoring & reporting of the health of Cyber Security. • Ensure the adherence to the Security Policies and checklists before any application or platform is brought into the ecosystem. • Manage Endpoint protection and Endpoint Detection & Remediation deployment & operations - ensuring complete coverage - installed on all endpoints and servers, updating prevention policies on a regular basis, Application whitelisting/blacklisting, vulnerability monitoring and reporting. • Get the patching done on all endpoints and servers regularly based on the vulnerabilities detected by EPP and EDR tool, patches released by OEMs and other out of band patches. • Define and document security Incident management process. • Ensure the adherence to security Incident management process. • In case of any security incident, immediate remedial action to be taken, regular updates to IT Leadership and management. • Complete forensics of the incident to be performed, remedial action taken, root cause analysis done and corrective measures to be performed. • Tracking and understanding emerging security practices and standards. Raise the awareness level of Employees about Cyber Security. • Regular user awareness drills. • Regular communication to the employees. • Conduct employee trainings on good cyber practices. Regular reporting & dashboards. • Monthly cyber security health report - Adoption and benefit realization against the investment made. • Fortnightly dashboard to leadership team - Stats on Cyber defense, Incident. • Project plan and status for cyber security projects Work Experience • 8-12 years of experience (manufacturing experience would be an added advantage). • Technical knowledge on following technologies: • Perimeter Firewalls - Cisco, Palo Alto, Fortinet • NAC - Cisco ISE, Forescout • EDR - Sentinel, CrowdStrike • WAF - Akamai, Others • SASE, CASB, CSPM, Cloud Security • PAM - CyberArk, Arcos • Extensive experience in information security and/or IT risk management with a focus on security, performance and reliability. • Excellent written and verbal communication skills as well as business acumen and a commercial outlook. • Ability to manage senior stakeholders