Career Details

Group Company: Nexdigm Private Limited

Designation: Executive (NPL_PS_ASU_TRA_E)

Office Location: Pashan Pune (Regional Office), Mahalaxmi Mumbai (Regional Office), Mahalaxmi Mumbai (Corporate Office)

Years of experience: 1 to 3

Salary Range: INR 550000 to 700000 (Annual)

Position description:

Primary Responsibilities:

• Consult with IT and security staff to ensure that adequate risk assessment is factored into the evaluation, selection, installation and configuration of hardware, applications and software.
• Recommend and coordinate the implementation of technical controls to support and enforce defined security policies.
• Assess and report on threats, vulnerabilities and residual risk; and recommend remedial action.
• Identify gaps on compliance with security policies, as well as the enforcement of policies within the applications and infrastructure supporting IT services
• Evaluate and assess emerging security threats and vulnerabilities in banking industry and work to identify appropriate controls.
• If required review and provide recommendations to IS policies, standards, guidelines/ processes.
• Prepare reports for management of risk assessment status as per bank templates

Additional Responsibilities:

Reporting Team

• Reporting Designation:
• Reporting Department:

Educational qualifications preferred

• Category: Bachelor's Degree, Master's Degree
  
• Field specialization: Computer Engineering, Information Technology
  
• Degree: Bachelor of Engineering - BE, Bachelor of Science - BS, Bachelor of Technology - BTech
  
• Academic score:
• Institution tier:

Required Certification/s:

Required Training/s:

Required work experience

• Industry: IT/ITES/Consulting
• Role: Executive
• Years of experience: to

Key Performance Indicators:

Required Competencies:

Required Knowledge:

Required Skills:

To be tailor-fit for the above skillsets, you need to have,

• Certain key skills like,

o Application Security expertise including experience of performing black box security reviews

o Knowledge on security for SOA applications, middleware security, interface security etc.

o Knowledge on Web application security standards, OWASP etc and cloud security standards 

o (CSA, NIST, SANS).

o Knowledge on IBM data power and other application security devices

o Knowledge on securing financial/ trade applications like SWIFT, T24, Murex is an added advantage

o Assessing secure devops, Secure coding techniques is an added advantage

o Design Knowledge on Infrastructure security, network security, data center security

o In-depth review of security device implementations like IPS, IDS, Proxy, Packet brokers, WAF, Remote access, load balancer, VPN, SDN, Wan accelerators, DDOS devices, APT devices, sandboxing devices, Virtual appliances, Vasco/secure tokens etc.

o Knowledge on secure encryption standards, PKI, PGP and other security standards.

o Knowledge on secure zones, network segmentation, HSM operations

o Knowledge on SWIFT CSF framework is an added advantage

• Certain other skills like,

o Knowledge to assess systems for compliance to PCI DSS Security standards

o Knowledge on IPSEC, TLS, SSL implementations for various channels.

o Develop Technology Risk Policies, procedures and standards.

o Ability to review VA reports, Appscan report and Penetration test reports and comprehend risks

o Highly developed communication skills, both verbal and written

o Demonstrate strong relationship management skills

o Possess advanced problem-solving skills

Required abilities

• Physical:
• Other:

Work Environment Details:

Specific requirements

• Travel:
• Vehicle:
• Work Permit:

Other details

• Pay Rate:
• Contract Types:
• Time Constraints: Late sittings
• Compliance Related:
• Union Affiliation: