IT Risk Manager - Vulnerability Management

<p><p><b>Key Responsibilities :</b><br/><br/></p><p>- Vulnerability Management: Use a variety of VAPT tools like Burp Suite, OWASP ZAP, Nessus, Nmap, and Postman to assess applications and infrastructure.<br/><br/></p><p>- Security Best Practices: Ensure adherence to OWASP Top 10, API Security best practices, and secure coding principles across all development teams.<br/><br/></p><p>- Configuration Reviews: Conduct secure configuration reviews for firewalls, servers, endpoints, and API gateways to minimize vulnerabilities.<br/><br/></p><p>- DevSecOps: Help integrate security into our development lifecycle, working with Dev and Infra teams to ensure secure deployments.<br/><br/></p><p>- Incident Response: Participate in incident response workflows using tools like Splunk or CrowdStrike, and assist in maintaining incident response plans.<br/><br/></p><p>- Documentation & Compliance: Write and maintain security documentation, including SOPs.<br/><br/></p><p>- Ensure awareness and adherence to regulatory standards such as the RBI Cybersecurity Framework, PCI DSS, and NIST.<br/><br/></p><p>- Risk & Audits: Conduct risk assessments, security audits, and third-party security evaluations.<br/><br/></p><p>- Collaboration: Work closely with cross-functional teams (Development, Infrastructure, and Compliance) to ensure a unified and secure :</b></p><p><br/></p>- B.Tech/B.E. in Computer Science/IT or Graduate with certifications like Knowledge</b> : IT Risk Management and Operational Risk Set (Must)</b> : IT Risk Management, Regulatory Knowledge, technical knowledge, Audit & Compliance, Analytical Skills, Reporting Skills</p><p><b><br/></b></p><p><b>Skill Set (Desired)</b> : IT Risk Management, Regulatory Knowledge, technical knowledge, Audit & Compliance, Analytical Skills, Reporting Skill</b> : IS standards, Risk Assessment tools, IT Infrastructure knowledge, Cybersecurity Concepts, Data Loss prevention Range</b> : 5+ years</p><br/></p> (ref:hirist.tech)