About the role
Job Description
Role: Security Operations Lead
Location: Pune or Bangalore, India
Who are we looking for
Information Security Operations Lead.
Information Security Operations Lead with strong experience in Vulnerability Management, Security Governance, and Risk Management. Proven expertise in enterprise vulnerability assessment and remediation programs.Hands on experience in Security Incident Management, and GRC related activities. Strong customer-facing experience in delivering security posture reporting and governance reviews.
The role reports into the Security Delivery Manager
Technical Skills Summary
Due to the technical nature of the position and the requirements to relate to a broad spectrum of security domains, a bachelor's degree from an accredited university and equivalent of ten years' experience in security related activity is required.
Lead end-to-end Vulnerability Management lifecycle using Tenable SC and Tenable IO.
Perform vulnerability analysis, risk contextualization, prioritization, remediation tracking, and validation.
Maintain and govern vulnerability risk registers, risk acceptances, and security exceptions.
Security Incident Management and end to end investigation and documentation as per Incident response plan.
Provide governance oversight for Imperva WAF, including policy reviews, exception management, and control effectiveness monitoring.
Develop monthly and quarterly security posture reports, dashboards, KPIs, and executive summaries.
Collaborate with business and technology stakeholders to ensure compliance with security standards and regulatory requirements.
Process Skills
Manage vulnerability remediation governance and track closure against agreed SLAs.
Conduct security risk assessments and maintain risk treatment plans and registers.
Participate in internal audits, evidence collection, audit responses, and remediation activities.
Produce monthly, quarterly, and annual security posture reports for customers and management.
Measure and report security KPIs/KRIs to demonstrate risk reduction and program effectiveness.
Incident Response plan and end to end documentation of security incidents.
Behavioural skills
Strong leadership and stakeholder management capabilities.
Excellent analytical and risk-based decision-making skills.
Ability to influence technical and business teams to drive remediation and compliance activities.
Strong communication, presentation, and report writing skills.
Experience working with senior management, customers, auditors, and external suppliers.
Ability to manage multiple security workstreams and competing priorities.
Collaborative team player with mentoring and coaching capabilities.
Certification(s)
CISSP or CRISC (Preferred)
ITIL Foundation
Security plus or CEH (Required)