Senior Cybersecurity Program Executive

Senior Engineer - PMO

Responsibilities

CyberSecurity Program Executive

Operational Execution:

Assist in the implementation of cybersecurity programs and initiatives at the group level.

Support the monitoring of cybersecurity activities, including threat detection and mitigation efforts.

Coordinate with cross functional teams (IT, Business, Application) to address operational cybersecurity challenges.

Risk Management Support:

Participate in risk assessments and provide inputs and support on mitigation strategies.

Maintain and update the cybersecurity risk register with identified risks and mitigation actions.

Compliance and Audit Support:

Ensure adherence to application compliances and framework such as ISO27001, DPDP, Cert-In, NCIIPC, NIST etc.,.

Assist with preparing documentation and evidence for audits and compliance checks.

Incident Response Coordination:

Support the execution of incident response plans, ensuring timely communication with stakeholders.

Document and track incident resolution activities.

Documentation and Reporting:

Maintain detailed records of cybersecurity initiatives, progress, and outcomes.

Prepare regular reports for the Lead - Cybersecurity and senior stakeholders.

Key Stakeholders - Internal

Department Heads

System Administrators and Operations

Internal Auditors

Legal and Compliance

Risk Management Team

Security Awareness and Training Teams

Key Stakeholders - External

External Security Consultants

Contractors and Service Providers

Customers and Clients

Insurance Providers

External Incident Response Teams

Qualifications

Educational Qualification:

Minimum Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Advanced degree (e.g., Master's, MBA) in Cybersecurity, Information Assurance, or a relevant discipline is highly desirable.

Certification:

CompTIA Security+, ISO 27001 Foundation, or other relevant certifications preferred.

Work Experience (Range of years):

4+ years in cybersecurity operations or IT risk management.