General Manager - Global Information Security
Tata Communications · Chennai · onsite · Posted 51d ago
Undisclosed12–18 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Job Summary
Accountable for managing the secured development, deployment, operations and lifecycle management for internal and external applications, AI platforms and projects as well as public and private cloud infrastructure across the organisation and al subsidiaries. Secure-by-design, DevSecOps transformation, AI model governance, and cloud security architecture across hybrid and multi-cloud environments.
- Build security domain capability
- Influence CoE, product and engineering functional leadership
- Drive security culture in development teams
Define and implement enterprise application security strategy across all digital products and services. Collaborate with business and technology stakeholders to maintain ongoing security governance and address security risks associated with applications and digital platforms to provide security assurance for customer facing application platforms/services.
- Embed secure SDLC (SSDLC) practices across engineering teams.
- Establish DevSecOps frameworks integrated with CI/CD pipelines.
- Oversee:
- SAST
- DAST
- SCA
- API security
- Mobile application security
- Container and microservices security
Lead security for multi-cloud and hybrid cloud environments including AWS, GCP, Azure as well as private cloud services
Define and implement enterprise cloud security strategy across all digital products and platforms. Collaborate with business and technology stakeholders to maintain ongoing security governance and address security risks associated with cloud infrastructure and automation.
- Cloud security architecture and guardrails
- CSPM and CNAPP governance
- Identity and access security for cloud workloads
- Cloud-native security monitoring
- Container and Kubernetes security
- Serverless security
- Data security in cloud environments
Develop enterprise framework for AI and ML security and risk management including,
- AI model security
- Protection against model theft and poisoning
- Secure training data pipelines
- Responsible AI governance
- Adversarial AI threat mitigation
- AI risk assessment and regulatory compliance
Establish AI security standards aligned with emerging frameworks such as: NIST AI RMF, ISO 42001, Responsible AI guidelines
Governance and Operational Responsibilities Lead implementation of DevSecOps at scaleincluding:
- Security testing automation in CI/CD pipelines
- Container image security
- Software integrity and artifact signing
- Open-source software dependencies
- Threat modelling
- Security architecture reviews
- API discovery and inventory
- API gateway security
- Application Security
- OWASP Top 10
- Secure coding practices
- Application threat modelling
- AWS / Azure / GCP security architectures
- Kubernetes security
- CNAPP / CSPM platforms
- Zero Trust architecture
- AI model lifecycle security
- ML pipeline security
- AI governance frameworks
- DevSecOps pipeline security
- Infrastructure as Code security
- Software supply chain security
Sourced from naukri
Skills
AutomationCI/CD Pipelinescloud servicesapi securityai modelamazon web servicesdastCSPMai governanceai securityCloud InfrastructureContainerAPI GatewaysCNAPPcloudCloud SecurityApplication SecurityArchitecturecomplianceMicrosoft AzureArtificial Intelligence
About Tata Communications
Tata Communications
Telecom
5.9k+
employees
1986
40 years old
Mumbai, Maharashtra
India
About
Tata Communications facilitates digital transformation for enterprises worldwide, enhancing connectivity, cloud solutions, and operational efficiency through advanced services.
Industries
Telecom
Employee ratings
4,031 reviews
3.9/ 5
Culture
3.8
Career growth
3.0
Work-life
3.9
Employees rate it well for
Work Life Balance431Salary381Work Culture381Job Security327Work Environment284
Find them on