Kotak Mahindra Bank - Chief Manager - Information Security

Security Operations Center (SOC) administration and governance

- Review SOC parameters like threat intel status, use cases, on-going projects and prioritize for closure

- Review SOC configuration parameters to ensure asset completeness

- Review SOC use cases periodically to ensure relevant use cases are present

- Monitor all SOC activities along with SOC leads from vendor

Service management

- Oversee the service tickets assigned to information security team to ensure proper risk assessment and closure

- Assist and train the team on risk assessment of the user requirements

Information Security Risk Assessment

- Develop a framework to ensure vulnerabilities, threats, alerts, requests are prioritized and addressed which helps business enablement and at the same time ensure minimize risks on internal and external Company environment

- Manage all Information Security Vendors to ensure TAT and service compliance

- Participate in Red team activities with the vendor to ensure sufficient coverage of Company assets, discuss issues with IT team and ensure closure

Perform and review the risk assessments (RCSA) of:

- Security devices

- IT processes

- InfoSec processes

- SOC process

Knowledge of tools:

- Hand on experience for Q-Radar, SPLUNK, or similar SIEM tools, VAPT tools like Nessus, MetaSploit etc.

- Should also be aware of multiple Operating systems to ensure proper validation of the VAPT issues

Certifications:

CISA, CEH, ISO27001, CISSP any other IT security and risk management certification will be added advantage