Hiring For Information Security (VAPT) - Jaipur & Mumbai

Job Summary:

The Information Security Specialist is responsible for managing cybersecurity governance, vulnerability management, compliance, audits, risk assessments, security awareness initiatives, and control assurance activities. The role ensures adherence to regulatory requirements, organizational security standards, and continuous improvement of the organization's security posture.

Key Responsibilities

Vulnerability Assessment & Penetration Testing (VAPT) Program Management

• Manage the end-to-end Vulnerability Assessment & Penetration Testing (VAPT) program across the organization.
• Maintain asset inventory and coordinate vulnerability scanning activities.
• Track remediation efforts and ensure timely closure of identified vulnerabilities.
• Coordinate with external security vendors and stakeholders for assessment activities.
• Prepare and present fortnightly, monthly, and quarterly security and vulnerability management reports to management.

2. Information Security Governance & Compliance

• Develop, maintain, and update Information Security policies, procedures, standards, guidelines, and runbooks.
• Monitor and validate security Key Performance Indicators (KPIs).
• Track and ensure compliance with backup management and patch management processes.
• Ensure adherence to regulatory, contractual, and organizational information security requirements.
• Support continuous improvement of governance and compliance frameworks.

3. Audit Management

• Coordinate internal, external, regulatory, and customer security audits.
• Prepare audit documentation and facilitate audit reviews.
• Track audit observations, non-conformities, and corrective actions.
• Ensure timely closure of audit findings and compliance gaps.

4. Security Control Assurance

• Review and validate the effectiveness of security controls across the organization.
• Monitor and assess key security technologies and controls, including:
• Data Loss Prevention (DLP)
• Breach & Attack Simulation (BAS)
• Security Monitoring and Control Validation Activities
• Recommend improvements to strengthen the organization's security posture.

5. Cyber Security Awareness & Phishing Simulations

• Plan and execute cybersecurity awareness programs and campaigns.
• Conduct phishing simulation exercises to assess user awareness and resilience.
• Analyze awareness campaign effectiveness and phishing simulation outcomes.
• Prepare management reports highlighting awareness metrics, participation, and risk trends.

6. Risk Assessment (RA)

• Conduct and coordinate annual Risk Assessments (RA).
• Ensure assessments are aligned with RBI guidelines and applicable regulatory requirements.
• Identify, document, and evaluate information security risks.
• Track remediation plans and ensure timely closure of identified risks and control gaps.

7. Team Development & Knowledge Management

• Support team capability development through structured training and mentoring.
• Facilitate knowledge transfer sessions and documentation of key processes and controls.
• Ensure smooth transition of responsibilities across team members.
• Promote continuous learning and information security best practices within the team.

Required Qualifications & Experience

• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field.
• Relevant certifications such as CEH, ISO 27001, Security+, preferred.
• Proven experience in information security governance, compliance, vulnerability management, audits, and risk management.

Key Skills

• Vulnerability & Risk Management
• Information Security Governance
• Regulatory Compliance & Audit Management
• Security Metrics & Reporting
• Security Awareness Programs
• Stakeholder Management
• Analytical and Problem-Solving Skills
• Effective Communication and Documentation