Job Summary
Function Summary - The objective of Technology Risk is to make sure that Technology / Information and Cyber Security risks are clearly understood by the 1st line of defense, transparently reported to leadership through governance, and managed within the defined risk appetite and enterprise Risk management Framework. Technology Risk is 2nd Line of defense division reporting to Chief Risk officer of HCLTech. Risk and compliance functionally report to audit committee of board.
Position Summary
We are seeking a future team member for the role of Technology risk governance within Technology risk. The role is in Noida, India. This role will report to the Technology Risk governance leader providing oversight and challenge for technology risk and will make impact through following ways.
- Candidate in this role will function as subject matter expertise within the discipline of Cybersecurity, IT security tools, concept, and architecture.
- Candidates in this role will also be expected to possess the technical aptitude necessary to understand the modern technology, IT security tools, Cloud infrastructure, vulnerabilities, and current threat landscape.
- Role will require building and maintaining working relationships with multiple business units, information technology teams, and engaging with various levels of senior management.
- Ensures that the Technology risk to the organization’s information posed by a variety of cyber threats (cyberattacks; theft or corruption from within; etc.) is documented, tracked, and minimized.
Candidates will need to establish and maintain positive and productive relationships through ongoing dialogue with department direct reports, technical leads, internal business partners, senior management, and other interested parties.
Technology Risk governance manager is expected to.
- Provides update (written reports) to management team on the review, assessment and publish a dashboard to the senior management on regular basis.
- Continuously assess and review the technical architecture of existing and new requirements and provide the input to minimize the risk.
- Continuously evaluate and assess current and future security needs of the organization and make recommendations and business case requests to substantiate changes.
- Partner with Global Information Technology, Global information security, Risk & Compliance, and other internal stakeholders.
- Support development of program and training for the team members.
Assessing the various threat advisories and technology available in the market.
- Recommend and develop the required policy as per the requirement. Review and provide the input as one of the team members of policy review board.
- Lead/Coordinate actions related to cyber security framework, process, tools, governance, and assessment performed by the team.
Contribute actively to improving the Technology risk governance framework and its implementation.
Key Responsibilities
The Cyber Security manager will face challenges an adequate response to which will require some of the following aptitudes.
- Interface with Global Information Technology team, Risk & Compliance organization, and other internal stakeholders.
- Requires the ability to respond proactively within the scope of a global, fast-moving corporation.
- Requires the ability to understand the requirement in details and act to minimize the risk of organization holistically.
- Manage escalations, incidents, and complex problems.
- Requires the ability to judge the gravity of a situation and an awareness as to what one can to, personally to bring it to resolution, as well as when to seek assistance.
- Maintain professionalism, solution focus, and loyalty to R&C and the larger objectives of HCL.
- Requires the ability to distinguish between client interests and HCLTech interests and, knowing the distinction, to act in keeping with HCL’s best interests.
- Maintain a positive attitude and provide an example of model behaviours to junior staff, particularly those in R&C function.
Requires the ability to maintain a perspective on events, understanding service provision is a field that is rife with highs and lows.
Skill Requirements
-
- Strong written and verbal communication skills.
- Desirable – 7+ years of work experience related to Cyber security tools implementation, configuration, and its administration.
- Developing cyber security operation framework, its implementation and regular monitoring through continuous metrics report out.
- IT and application architecture review from cyber security standpoint.
- Cyber security implementation on the Cloud service provider environment, well versed with any one of the three main CSP (Azure, AWS, and GCP)
- 1 years of experience in Application architecture, DevSecOps, DAST, SAST, Secure coding and over all cloud security.
- Information security and cyber security standard and guideline like ISMS (ISO 27001-2013), NIST 800 – 53, CIS and IT general controls.
- Understanding of network security risks, exploits, and vulnerabilities.
- Proficiency in all the infrastructure layers, hardware, OS, virtualization, storage, network, database, and security
- Offensive Security – Vulnerability assessment, Penetration testing, Red Team assessment, Threat advisories and threat intel and hunting.
- Hands on experience and knowledge of including but not limited to followings.
-
-
- Antivirus, Host based intrusion prevention, EDR, XDR
- Vulnerability scanner
- Security Information and event management solution
- Security orchestration, automation, and response solution.
- Patch management solution.
- Data leakage solution
- Intrusion prevention systems
- Firewall
- Web content filter
- Web application firewall.
- Cloud native application protection platform
- Cloud Security posture management.
- Cloud access security broker.
- Secure access service edge.
-
- Travel Eligibility –
- Required – Candidates must be willing/eligible to travel to/from India to other global.
geographical regions.