Assistant Vice President - Insider Threat Lead

Role Purpose: Responsible for managing all identified/known insider threat vector of information leakage either deliberately or inadvertently with focus on preventing Insider threat in getting exposed. The role is also responsible for leading the complete program to protect SBIC's critical information from unauthorized exposure.

Role Accountability:

1. Define and Manage processes around insider threat management.
2. Manage Insider Threat Monitoring program by ensuring processing security alerts generated by the various monitoring tools and technologies operated by the team in order to identify potential instances of data loss / exfiltration and other activity which may pose a potential Insider Threat risk.
3. Prepare and operationalize the relevant Alert/ Incident metrics, as part of the overall infosec function.
4. Manage escalations of security alerts for review by business line management, seek response and validate vis-a-vis SBI card information security policies and allowed security practices.
5. Manage escalations of security incidents alerts to SBIC Compliance Team and Co-ordinate with them for presentation in the steering committees for formal review and decisioning on the Disciplinary actions.
6. Provide feedback to the DLP (Data Leak prevention) Team basis review of the Alerts, Incidents identified as per the existing DLP rules.
7. Review the classification of alerts raised on a periodic basis to decrease false positives.
8. Lead & maintain internal users (FTEs and NFTEs) related security incidents which could indicate a potential Insider Threat risk and maintain detailed trackers for incidents witnessed and actions taken.
9. Ensure end to end tracking of Insider threat alerts and incidents, including disciplinary actions taken by responsible business/ Human resource/ legal function.
10. Provide input to the Enterprise risk management committee (ERMC)/Information Security Committee (ISC) as per the prescribed frequency regarding incidents and actions taken on incidents
11. Participate in Disaster Recovery Planning, testing, troubleshooting and root cause analysis and documentation of the root causes.
12. Manage Service Partner operation from technology prospective.
13. Ensure process documentation and compliance adherence.

Measures of Success:

1. Successful development and monitoring of insider threat program
2. Increase in maturity of insider threat Programs (Adoption & Capabilities)
3. Timely delivery of project plans, milestone updates, presentations, assessment reports etc. to relevant stakeholders
4. Security metrics within acceptable threshold
5. Availability of DLP as a service in line with the enterprise expectations
6. Resolution of all technical issues reported by users within agreed TAT
7. Timely updation of DLP related SOPs and other documents
8. No adverse observations in Internal / External Audits
9. Process Adherence as per MOU

Technical Skills / Experience / Certifications:

1. Knowledge and in-depth understanding of Log management and processing
2. Experience in Technologies like DLP, CASB, UAM, Data Classification, IRM
3. Knowledge of cybersecurity risks and information security standards
4. Understanding of security controls from a people, process and technology perspective.
5. Knowledge of standard security processes and guidelines.
6. Certifications including Security+, CEH, GCIA, GCIH or similar
7. Knowledge of insider and privacy frameworks such as - NIST, DSCI, ISO, PCI, GDPR, etc.
8. Prior experience working in a Security Operations Center (SOC)
9. Experience in managing data incidents and breaches

Competencies critical to the role:

1. Detail Orientation
2. Teamwork and Collaboration
3. Stakeholder Management
4. Analytical ability
5. Problem Solving

Qualification:

Bachelor's Degree or B.Tech. in Computer Science / Information Technology or in a related discipline

Preferred Industry:

BFSI / NBFC /E-commerce/IT & ITES / Telecom