Information Security Professional

Job Title : Information Security Professional

Location : Mumbai, MH

Experience : 3+ Years

Domain : Insurance

Key Roles & Responsibilities :

- Information Security Governance : Implement and monitor information security policies, SOPs, controls, and governance frameworks.

- Cybersecurity & Risk Management : Identify, assess, and mitigate information security and cyber risks across business and technology environments.

- Cloud & Application Security : Monitor security posture across AWS/Azure/GCP, APIs, microservices, applications, and infrastructure.

- IAM & Access Management : Manage access controls, user privileges, IAM, Zero Trust, and maker-checker/segregation-of-duties controls.

- Vulnerability & Incident Management : Track VAPT findings, vulnerabilities, security incidents, threat alerts, and remediation closure.

- Third-Party Security : Conduct TPRM and security assessments for vendors, insurers, POSPs, and technology/API partners.

- Regulatory Compliance : Ensure compliance with IRDAI Cybersecurity Guidelines, DPDP Act, and ISO 27001 requirements.

- DevSecOps & Secure SDLC : Work with Engineering/DevOps teams to embed security controls, secure coding, OWASP practices, and security testing into the SDLC.

- Security Audits & Assessments : Coordinate VAPT, internal/external audits, regulatory assessments, and closure of security observations.

- Security Monitoring & Reporting : Monitor SIEM/security alerts, maintain security MIS, track KRIs/KPIs, and report security risks and incidents to senior management.

- Security Awareness : Support cybersecurity awareness, access governance, incident response processes, and security training across the organization.

Key Skills :

Information Security, Cybersecurity, Security Governance, Cloud Security, IAM, TPRM, VAPT, Vulnerability Management, Incident Response, SIEM, DevSecOps, ISO 27001, IRDAI Compliance, DPDP, API Security.

Skills

Cyber Security, Information Security, Cloud Security, Vulnerability Assessment, iAM, Security, DevSecOps