Vice President - Security Management Operations

Job Title: Vice President

Department: Information Security

About Business line/Function: The ISPL Security Monitoring Center (SMC) is a dedicated 24 × 7 operations hub that continuously watches every endpoint across APAC, using real‑time threat‑intelligence feeds, behavior‑analytics platforms and SIEM correlation engines. Analysts triage alerts, investigate anomalous activity, and verify the legitimacy of each incident. When a potential breach or violation is confirmed, the SMC team promptly escalates the case to CISRT team. By providing relentless visibility, rapid triage, and seamless hand‑off to CISRT, the SMC safeguards the organization's assets and ensures timely mitigation of cyber threats.

Position Purpose

To locally manage the Security Monitoring Center (SMC) resources and work with the Cybersecurity team/ team members in BNPP from various regions in APAC.

Understand the requirements from the stakeholders and meet their expectations. Setting up the KRI's & KPI's for the SMC Team.

To review, propose and optimize existing security monitoring process within the Cybersecurity framework and phases aligning to Global standards.

To manage and inspire SMC team to achieve and deliver high quality technical outcome, ensuring full adherent to Global and Regional processes and standard operating processes.

Ensure timeliness in SMC KPI for Level 1 / 2 alert handling and escalation process in support of the global and regional use cases

Responsibilities

Direct Responsibilities

• Lead and manage the 24x7 Security Operations Center
• Primarily responsible for security event monitoring, management and response
• Ensure incident identification, assessment, quantification, reporting, communication, mitigation and monitoring
• Revise and develop processes to strengthen the current Security Operations Framework, Review policies and highlight the challenges in managing SLAs
• Prepares operational documentation for operational teams in use of security solutions
• Handling escalations and work as L2 analyst for remediation of Security Alerts / Incidents
• Ensure all analysts are aware of and properly adhere to procedures, Service Level Agreements
• Train resources on new process and provide regular updates
• Drive the strategic development of SMC operations, overseeing the technical capability of SMC team in providing relevant Level 1 and 2 support
• Identify and assist Management in improving Employee engagement.
• Provide expert analytical investigative support of security Alerts / Incidents.
• Perform & direct analysis of security Alerts / Incidents for further enhancement of alert catalog.
• Manage and direct external security providers to provide actionable and useful incident escalations.
• Lead and drive complex technical issue and escalation in Problem Management
• Creation of reports, dashboards, metrics for SOC operations and presentation to Sr. Mgmt.
• Co-ordination with stakeholders, build and maintain positive working relationships with them.
  
  

Technical & Behavioral Competencies

• Proficient in Incident Management and Response
• Ability to handle high pressure situations with key stakeholders to collaborate and communicate effectively and respectfully with both business-oriented executives and technology-oriented personnel in teams across the organization.
• Hands-on experience on designing, implementing use cases (Rules, Reports, Dashboard) on SIEM solution such as ArcSight or QRadar.
• Experience of performing security monitoring and incident response activities in an advanced Security operation centers (SOC) environment (log analysis, event analysis, incident investigation, reporting)
• Experience and knowledge in investigating incidents, remediation, tracking and follow-up for incident closure with concerned teams, stakeholders.
• Technical knowledge of security tools (Anti-virus/malware, IDS/ISP, Firewalls, proxies, vulnerability, etc) and infrastructure (Network, OS, Database) Experience and Qualifications required
  
  

Specific Qualifications: BE-IT / B Tech /Comps or Equivalent

Technical Skills

Skills Referential (Required knowledge, skills and abilities)

Strong knowledge & hands on experience in SIEM products like ArcSight, Qradar etc.

Good understanding on network and endpoint security devices like Firewall, IPS, Web Application Firewall (WAF), Vulnerability Scanning, Antivirus, Endpoint Encryption etc.

Advantage to have certifications like Certified Ethical Hacking (CEH), Offensive Security Certified Professional (OSCP), Certified Information Security Manager (CISM) or equivalent

Behavioral Skills

• Ability to collaborate / Teamwork
• Ability to deliver / Results driven
• Communication skills - oral & written
• Critical thinking
  
  

Education Level: BE-IT / B Tech /Comps or Equivalent

Location: Mumbai

About BNP Paribas Group

BNP Paribas is the European Union's leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group's commercial & personal banking and several specialized businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability.

About BNP Paribas India Solutions

Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, European Union's leading bank with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 10000 employees, to provide support and develop best-in-class solutions.

Commitment to Diversity and Inclusion

At BNP Paribas, we passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work. We prohibit Discrimination and Harassment of any kind and our policies promote equal employment opportunity for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, colour, national origin, age, religion, social status, mental or physical disabilities, veteran status etc. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.