Security Transformation Assoc Manager

Role: Security Delivery Associate Manager

Level: 8

Location: Bengaluru

Experience: 10-12 years

Main Skill: Application Security

Must have Skills:

• Proven experience in a cyber security , with a focus on consultancy
• In depth understanding of OWASP Top 10/ SANS Top 25 and ability to demonstrate the different components of exploitation
• Proficiency with Invicti or equivalent Application Security tools like (HCL AppScan/Bursuite etc)
• Relevant certifications such as CISSP, CISM, CCSK or equivalent are highly desirable.
• Bachelor’s degree in Cyber Security, Information Technology, or a related field

• Strong leadership and stakeholder management skills

• Excellent verbal and written communication

• Analytical problem-solving mindset

• Ability to influence technical and non-technical stakeholders

• Strong focus on operational excellence and risk reduction

Good to Have Skills:

• Knowledge/Certifications- OSCP or GX-PT
• Knowledge on ITIL processes
• Knowledge on ISO 27K processes and controls
• Scripting knowledge (Python/Powershell/Bash)

Roles & Responsibilities: 

• Prepare and deliver compliance reports to management, detailing the organization’s compliance status and areas for improvement

• Manage application vulnerability identification, prioritization, tracking, and remediation
• undefined
• Provide remediation guidance for OWASP Top 10 and other application security findings
• undefined
• Conduct risk assessments and recommend compensating controls where remediation is not immediately feasible.

• Monitor vulnerability remediation SLAs and report risk posture to leadership.
• Audit internal operational processes and share report to management and identify improvements Develop and maintain security documentation and reports Engage with stakeholders for various security evaluation discussions and identify improvements Review and monitor internal processes Influence training plans to align with company goals Review accuracy of security controls and share report Perform PoC’s 

• Role Description:  Work with cross skilled security groups on various aspects of Security Operational functions Work and facilitate Vulnerability and Compliance queries from Business from security scans and reports Conduct security audits of internal operational process Prepare and deliver compliance reports to management, the periodic status of the process health Provide standard process advice for SecOps/SOC teams Coordinate and perform: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Encourage reduction in recurring vulnerabilities ·     Drive Automation and operational efficiency improvements Drive Positive stakeholder satisfaction and audit outcome