Job Purpose
The Security Configuration Specialist is responsible for designing, creation, review, and continuous improvement of Security Configuration Documents (SCDs) across enterprise systems, applications, and infrastructure. The role ensures configurations align with industry standards, regulatory requirements and BFL security policies, reducing risk and enhancing system hardening. The role validates and approves the configuration implementation reports and evidences as a defined calendar activity.
Duties and Responsibilities
1.SCD Development Documentation
Develop Security Configuration Documents (SCDs) for - Operating systems, Network devices, Cloud settings (Azure, AWS, GCP), Databases, Middleware, and Applications
Define baseline configurations based on - CIS Benchmarks, NIST guidelines and OEM best practices
Ensure explicit, structured, and standardized documentation of SCDs
2.Review Validation
Conduct periodic SCD Reviews/Audits
Track and ensure closure within the TAT
3.Governance Compliance




Ensure SCDs align with - BFL security frameworks Regulatory requirements
Support internal and external audits related to SCDs
Track and manage exceptions and risk acceptances
4.Continuous Improvement
Regularly review and update SCDs to reflect - Emerging threats, Vulnerabilities and Technology changes
Incorporate lessons learned from - Security incidents, VAPT and audits
5.Collaboration Stakeholder Engagement
Work with IT Teams (IT Infrastructure/CoE, DevOps/Cloud teams, Application Support, InfoSec Compliance, Data Privacy, SOC, Endpoint Security, Network, Database and Middleware etc.)
Work with IT Compliance
Work with Corporate Audit
Ensure closure of regulatory observations and avoid recurrence through continual improvements
6.Automation Documentation
Support automation of SCD enforcement using - Configuration Management and various Security Tools
Maintain central repository of SCDs and templates

Key Decisions / Dimensions
SCD che

📌 Associate Delivery Manager Pune
🏢 Bajaj Finance
📍 Pune