Job Purpose

- To Conduct periodic assurance assessments of core IT Security platforms, including: oEndpoint Security / EDR oNetwork Security (NGFW, WAF, IDS/IPS)

oIdentity Access Management (IAM, PAM)

oData Security DLP oVulnerability Management Patch Management oCloud Security Posture Management (CSPM)

- Validate design effectiveness and operating effectiveness of security controls.
- Identify control gaps, design weaknesses, and residual risks in deployed platforms.
- Ensure platform controls are aligned with: oRBI Master Direction on IT Governance, Risk, Controls Assurance (2023)

oISO/IEC 27001

oNIST CSF / NIST SP 800 series

- Review Methodology Risk Assessment oDefine and execute risk based review methodology for IT Security platforms. oPerform:

Control maturity assessments

Configuration and governance reviews (not day-to-day ops)

Exception and deviation analysis oRate findings based on impact, likelihood, and regulatory criticality.

oTrack remediation effectiveness and closure evidence.

- Governance, Reporting Metrics oPrepare Assurance Dashboards Management Reports, including: oControl coverage status

Open / overdue security observations

Recurring audit findings

Platform assurance risk heatmaps oPresent assurance outcomes to:

IT Leadership

CISO / CIO office

Risk Compliance forums oContribute to continuous improvement of IT Security governance framework.





Duties and Responsibilities A-To Conduct periodic assurance assessments of core IT Security platforms

B-Ensure platform controls are aligned with regulatory requirements

Major Challenges

- To identify all compliance requirements
- Ensure platform controls are aligned with regulatory requirements

Required Qualifications and Experience

- Qualifications
- Engineering / Computer Graduate with 1014 years of total experience
- 5+ years in IT Security Assessment, Assurance, Risk, or Audit roles
- Prior experience in regulated BFSI environments strongly preferred

- Relevant Certifications like CISA/ISO 27001 LA a)Work Experience
- Strong experience in IT Security Assurance / IT Risk / GRC / IS Audit
- Deep understanding of security platforms: EDR, IAM/PAM, VM, Network Security, Cloud Security

- Proven experience handling RBI / REBIT / ISO audits
- Strong control assessment and documentation skills
- Excellent analytical, reporting, and stakeholder communication skills
- Good to Have

- Exposure to Upper Tier NBFC / Banking / Financial Services
- Familiarity with ServiceNow GRC / IRM
- Understanding of cloud security (Azure/AWS/GCP)
- Governance Practices across Datacenter, Cloud, Servers, Endpoints, Security Technologies, Application Database

- Positive Written and Verbal Communication with Presentation Skills
- Good Team Player and sound in stakeholder management

📌 Senior Delivery Manager (Pune)
🏢 Bajaj Finance
📍 Pune