Security Transformation Assoc Manager

Role

Security Delivery Associate Manager

Level

8

Location

Bengaluru

Experience

10-12 years

Main Skill

Application Security

Must have Skills

Proven experience in a cyber security , with a focus on consultancy

In depth understanding of OWASP Top 10/ SANS Top 25 and ability to demonstrate the different components of exploitation

Proficiency with Invicti or equivalent Application Security tools like (HCL AppScan/Bursuite etc)

Relevant certifications such as CISSP, CISM, CCSK or equivalent are highly desirable.

Bachelor’s degree in Cyber Security, Information Technology, or a related field

Strong leadership and stakeholder management skills

Excellent verbal and written communication

Analytical problem-solving mindset

Ability to influence technical and non-technical stakeholders

Strong focus on operational excellence and risk reduction

Good to Have Skills

Knowledge/Certifications- OSCP or GX-PT

Knowledge on ITIL processes

Knowledge on ISO 27K processes and controls

Scripting knowledge (Python/Powershell/Bash)

Roles & Responsibilities

Prepare and deliver compliance reports to management, detailing the organization’s compliance status and areas for improvement

Manage application vulnerability identification, prioritization, tracking, and remediation

undefined

Provide remediation guidance for OWASP Top 10 and other application security findings

undefined

Conduct risk assessments and recommend compensating controls where remediation is not immediately feasible.

Monitor vulnerability remediation SLAs and report risk posture to leadership.

Audit internal operational processes and share report to management and identify improvements Develop and maintain security documentation and reports Engage with stakeholders for various security evaluation discussions and identify improvements Review and monitor internal processes Influence training plans to align with company goals Review accuracy of security controls and share report Perform PoC’s

Role Description: Work with cross skilled security groups on various aspects of Security Operational functions Work and facilitate Vulnerability and Compliance queries from Business from security scans and reports Conduct security audits of internal operational process Prepare and deliver compliance reports to management, the periodic status of the process health Provide standard process advice for SecOps/SOC teams Coordinate and perform: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Encourage reduction in recurring vulnerabilities · Drive Automation and operational efficiency improvements Drive Positive stakeholder satisfaction and audit outcome

To be filled by recruiter