Job Purpose

- To Conduct periodic assurance assessments of core IT Security platforms, including:
oEndpoint Security / EDR
oNetwork Security (NGFW, WAF, IDS/IPS)
oIdentity Access Management (IAM, PAM)
oData Security DLP
oVulnerability Management Patch Management
oCloud Security Posture Management (CSPM)

- - Validate design effectiveness and operating effectiveness of security controls.

- - Identify control gaps, design weaknesses, and residual risks in deployed platforms.

- Ensure platform controls are aligned with:
oRBI Master Direction on IT Governance, Risk, Controls Assurance (2023)
oISO/IEC 27001
oNIST CSF / NIST SP 800 series

- Review Methodology Risk Assessment
oDefine and execute risk based review methodology for IT Security platforms.
oPerform:
Control maturity assessments
Configuration and governance reviews (not day-to-day ops)
Exception and deviation analysis
oRate findings based on impact, likelihood, and regulatory criticality.
oTrack remediation effectiveness and closure evidence.

- Governance, Reporting Metrics
oPrepare Assurance Dashboards Management Reports, including:
oControl coverage status
Open / overdue security observations
Recurring audit findings
Platform assurance risk heatmaps
oPresent assurance outcomes to:
IT Leadership
CISO / CIO office
Risk Compliance forums
oContribute to continuous improvement of IT Security governance framework.

Duties and Responsibilities




A-To Conduct periodic assurance assessments of core IT Security platforms

B-Ensure platform controls are aligned with regulatory requirements
Major Challenges

- To identify all compliance requirements

- Ensure platform controls are aligned with regulatory requirements

Required Qualifications and Experience

- Qualifications

- Engineering / Computer Graduate with 1014 years of total experience

- 5+ years in IT Security Assessment, Assurance, Risk, or Audit roles

- Prior experience in regulated BFSI environments strongly preferred

- Relevant Certifications like CISA/ISO 27001 LA
a)Work Experience

- Strong experience in IT Security Assurance / IT Risk / GRC / IS Audit

- Deep understanding of security platforms: EDR, IAM/PAM, VM, Network Security, Cloud Security

- Proven experience handling RBI / REBIT / ISO audits

- Strong control assessment and documentation skills

- Excellent analytical, reporting, and stakeholder communication skills

- Good to Have

- Exposure to Upper Tier NBFC / Banking / Financial Services

- Familiarity with ServiceNow GRC / IRM

- Understanding of cloud security (Azure/AWS/GCP)

- Governance Practices across Datacenter, Cloud, Servers, Endpoints, Security Technologies, Application Database

- Good Written and Verbal Communication with Presentation Skills

- Positive Team Player and sound in stakeholder management

📌 Senior Delivery Manager (Pune)
🏢 Bajaj Finance
📍 Pune