Role & responsibilities

1.SCD Development & Documentation
•Develop Security Configuration Documents (SCDs) for - Operating systems, Network devices, Cloud environments (Azure, AWS, GCP), Databases, Middleware, and Applications
•Define baseline configurations based on - CIS Benchmarks, NIST guidelines and OEM best practices
•Ensure clear, structured, and standardized documentation of SCDs
2.Review & Validation
•Conduct periodic SCD Reviews/Audits
•Track and ensure closure within the TAT
3.Governance & Compliance
•Ensure SCDs align with - BFL security frameworks & Regulatory requirements
•Support internal and external audits related to SCDs
•Track and manage exceptions and risk acceptances
4.Continuous Improvement
•Regularly review and update SCDs to reflect - Emerging threats, Vulnerabilities and Technology changes
•Incorporate lessons learned from - Security incidents, VAPT and audits
5.Collaboration & Stakeholder Engagement
•Work with IT Teams (IT Infrastructure/CoE, DevOps/Cloud teams, Application Support, InfoSec Compliance, Data Privacy, SOC, Endpoint Security, Network, Database and Middleware etc.)
•Work with IT Compliance




•Work with Corporate Audit
•Ensure closure of regulatory observations and avoid recurrence through continual improvements
6.Automation & Documentation
•Support automation of SCD enforcement using - Configuration Management and various Security Tools
•Maintain central repository of SCDs and templates

Preferred candidate profile

Technical Skills:
•Solid understanding of - System hardening, Secure configurations, OS, Network, Cloud, Databases, Middleware, SOC, Endpoint Security and Applications
•Knowledge of frameworks - CIS Benchmarks, NIST (800-53, 800-128), ISO 27001 controls and RBI requirements
•Familiarity with - Vulnerability management tools, Configuration/Security tools
•Basic scripting knowledge
Soft Skills:
•Team Management
•Strong documentation and writing skills
•Executive Dashboard preparation and reporting
•Analytical and risk-based thinking
•Stakeholder management and communication
•Ability to standardize and simplify complex technical content

📌 IT Asset Manager (Maharashtra)
🏢 Techila Global Services
📍 Maharashtra