Domain Manager

Job Purpose
The Security Configuration Analyst supports designing, creation, review, and continuous improvement of Security Configuration Documents (SCDs) across enterprise systems, applications, and infrastructure. This role assists in documenting secure configuration baselines, validating configurations, and ensuring alignment with industry standards, regulatory requirements and BFL security policies, reducing risk and enhancing system hardening.
Duties and Responsibilities
1.SCD Documentation Support

Assist in developing Security Configuration Documents (SCDs) for - Operating systems, Network devices, Cloud environments (Azure, AWS, GCP), Databases, Middleware, and Applications

Followed baseline configurations based on - CIS Benchmarks, NIST guidelines and OEM best practices

Ensure Clear, structured, and standardized documentation of SCDs
2.Review Validation

Support periodic SCD Reviews/Audits

Track and ensure closure within the TAT
3.Governance Compliance Support

Ensure SCDs align with - BFL security frameworks Regulatory requirements

Support internal and external audits related to SCDs

Track and manage exceptions and risk acceptances
4.Continuous Improvement

Regularly review and update SCDs to reflect - Emerging threats, Vulnerabilities and Technology changes

Incorporate lessons learned from - Security incidents, VAPT and audits
5.Collaboration Stakeholder Engagement

Work with IT Teams (IT Infrastructure/CoE, DevOps/Cloud teams, Application Support, InfoSec Compliance, Data Privacy, SOC, Endpoint Security, Network, Database and Middleware etc.

Work with IT Compliance

Work with Corporate Audit

Ensure closure of regulatory observations and avoid recurrence through continual improvements
6.Automation Documentation

Support automation of SCD enforcement using - Configuration Management and various Security Tools

Maintain central repository of SCDs and templates

Key Decisions / Dimensions

Accuracy and periodic updates of the inventory used for SCDs

Closure of gaps identified and relevant documentation

Major Challenges

Following document standardization across the IT landscape

Timely completion of reviews and closure of all Secure Configurations

Exception handling and relevant documentation

Required Qualifications and Experience
a)Qualifications

Post-Graduate or Graduate with 2-3 years of experience in Security Configurations (Security baselines/hardening standards, Audit and Compliance Management) preferably in NBFCs, Banks, Fintech or regulated financial institutions.

b)Work Experience
Technical Skills:

Basic understanding of - System hardening, Secure configurations, OS, Network, Cloud, Databases, Middleware, SOC, Endpoint Security and Applications

Awareness about frameworks - CIS Benchmarks, NIST (800-53, 800-128), ISO 27001 controls and RBI requirements

Fundamental understanding of Vulnerability management tools, Configuration/Security tools

Basic scripting knowledge
Soft Skills:

Strong documentation and writing skills

Analytical and risk-based thinking

Communication and Collaboration

Ability to follow the structure process and bring continuous improvements

Timely updates to Sr. Team members