Cyber Security

* Architecting and designing multi-layered cybersecurity solutions.
* Technology evaluation, selection and sizing of security infrastructure.
* Discussions with OEMs and partners.
* Drive Information Security Risk Assessment and Risk Treatment in alignment with organizational policies.
* Plan, coordinate, and manage Vulnerability Assessment & Penetration Testing (VAPT) exercises.
* Facilitate and support ISO 27001 / 27002 certification and compliance activities.
* Oversee and manage application security testing across the SDLC.
* Provide regular status reporting to internal management and clients.
* Act as a key point of contact for clients and internal stakeholders on security initiatives.
* Ensure adherence to security standards, policies, and best practices across projects.
* Support continuous improvement in security posture and threat mitigation efforts.

* Strong business acumen, strategy and cross-industry thought leadership
* Awareness of Information Security risk assessment and treatment methodologies.
* Awareness of latest technologies and Industry trends
* Logical thinking and problem solving skills along with an ability to collaborate
* Understanding of the financial processes for various types of projects and the various pricing models available
* Client Interfacing skills
* Project and Team management

* In-depth knowledge of security technologies such as Security Information and Event Management (SIEM), Security Orchestration Automation and Response (SOAR), Firewall (FW), Network Intrusion Prevention System (NIPS), Web Application Firewall (WAF), Database Activity Monitoring (DAM), Secure Web Gateway (SWG), Data Leakage Prevention (DLP), Endpoint Security (EDR), Email Security.
* Experience in client facing role in security lead capacity.
* Excellent communication skills.
* Certifications: CISSP / CISM / CISA / ISO 27001 / CEH / OSCP or similar.

We are seeking an experienced Information Security and Application Security professional to manage end-to-end security operations, ISMS activities, and application security testing. The role involves leading SOC operations, coordinating VAPT exercises, ensuring compliance with ISO standards, and providing regular status updates to internal and client stakeholders.