Key Performance Indicators

- Identify and assess risks through threat assessments and security operations data.
- Define and ensure timely response to Indicators of Compromise (IoCs) and Indicators of Attack (IoAs).
- Contribute to reducing Mean Time to Detection (MTTD) and Mean Time to Remediation (MTTR).
- Reduce JLR information security incidents.
- Ensure compliance with regulations like UNECE Regulation No. 155 and support the Cyber Security Management System (CSMS).

Key Responsibilities

- Identify and investigate potential threats and attacks.
- Proactively take remedial action for ongoing threats.
- Conduct Threat Assessment & Remediation Analysis (TARAs) and prioritize cyber defenses.
- Monitor network activity, identify anomalies, and collaborate with Security Operations for improvements.
- Ensure compliance with risk management schedules and measure security risks effectively.
- Manage KPIs and risk indicators to enhance security outcomes.
- Provide expertise on supplier assurance and supply chain security risks.
- Promote threat hunting within the organization.

Key Interactions

- Collaborate across Information Cyber Security, IT functions, Security Operations, Engineering, Governance, Risk & Compliance teams, and senior leadership.





Knowledge, Skills, and Experience

Essential:

- 5-15 years in security operations roles with expertise in incident investigations and key performance metrics (MTTD/MTTR).
- Knowledge of IoCs, IoAs, threat hunting, and network traffic analysis tools.
- Experience with IT audit, risk management, and regulatory compliance (NIST, ISO standards).
- Strong communication, analytical, and organizational skills, with the ability to engage stakeholders at all levels.

Desirable:

- Certifications like CISA, CISM, ISO27001 Lead Auditor, or CISSP.
- Knowledge of UNECE Regulation No. 155 and experience in manufacturing/automation security operations.
- Global business experience and familiarity with information security risk management.

Personal Profile

- Customer-focused, adaptable, and resilient with a robust 'can-do' attitude.
- Results-driven, collaborative, and capable of handling complex and demanding environments.
- Strong problem-solving, communication, and interpersonal skills with the ability to influence stakeholders.
- Proactive in embracing change and delivering personalized, dependable experiences.

📌 Cyber Risk Analyst (Bengaluru)
🏢 ONZESTT SERVICES INDIA PRIVATE
📍 Bengaluru