Role & responsibilities

Hi Sayan Das

Please find below JD ,
If this interests you , please share your cv with below details.

Total Experience
CTC
Expected ctc
Notice period
Current location

A. Cyber Security Posture Measurement & KPI Framework:

A. Define, maintain, and enhance the Cyber Security Posture KPI framework covering all major security domains, including: Network security, Endpoint security, Identity & Access Management, Cloud security, SOC and detection capabilities, Data security and encryption, Third-party and access controls

B. Ensure KPIs measure control effectiveness and risk reduction, not just tool deployment or activity.

C. Periodically review and recalibrate KPIs to align with: Risk appetite, Threat landscape, Regulatory expectations

B. Independent Control Testing & Validation

A. Own the organization-wide control testing program for cybersecurity controls.

B. Plan and execute risk-based testing of security controls across: All security tools, All security domains, On-prem, cloud, and hybrid environments

C. Validate:

A. Design effectiveness (Are controls designed correctly?)

B. Operating effectiveness (Are controls working as intended?)

C. Identify control gaps, weaknesses, and systemic issues.

D. Ensure control testing outcomes are repeatable, auditable, and defensible.

D. Cyber Risk & Scorecard Integration

A. Feed control testing results, KPI outcomes, and trends into the enterprise cyber risk scorecard.

B. Translate technical control effectiveness into risk language understandable by senior leadership.

C. Highlight High-risk areas, Deteriorating control trends, Concentration of risk across domains

D. Support risk acceptance and treatment discussions with factual data.

E.



Reporting & Executive Communication

A. Prepare periodic cyber posture reports for CISO, Senior Management, Risk and audit committees (as required)

B. Present concise insights on Overall security posture, Key weaknesses and exposures, Progress on remediation and maturity improvement

C. Ensure reporting enables decision-making, not just awareness

F. Audit & Regulatory Support

A. Act as the primary Infosec point for Internal audits, External audits, Regulatory assessments related to control effectiveness

B. Coordinate evidence collection for tested controls.

C. Validate remediation of audit findings before closure.

D. Ensure alignment between Audit observation, Control testing outcomes, Risk scorecard reporting

G. Cross-Functional Collaboration

A. Work closely with SOC teams (for detection and response controls), Network, endpoint, and cloud security teams, GRC and risk management teams

B. Maintain independence from operational execution while ensuring strong collaboration.

C. Challenge security teams constructively using data and evidence.

H. Process & Capability Maturity

A. Continuously improve assurance and testing methodologies using industry standards such as NIST, CSF, ISO 27001 / 27002, COBIT

B. Drive automation where feasible in KPI data collection, Control testing evidence, Reporting and dashboards, Mentor team members involved in assurance and testing activities (if applicable).

I. Required Skills & Experience

A. 8-10 years of experience in cybersecurity, with robust exposure to Cyber security assurance, Control testing, Risk and posture measurement

B. Experience working in regulated or audit-heavy environments preferred.

C. Certifications : CCSP CCSK

📌 Urgent Hiring - Manager/Senior Manager - Gurgaon (Gurugram)
🏢 Airtel Payments Bank
📍 Gurugram