Job Title : Information Security Skilled

Location : Mumbai, MH

Experience : 3 Years

Domain : Insurance

Key Roles &

Responsibilities :

- Information Security Governance : Implement and monitor information security policies, SOPs, controls, and governance frameworks.
- Cybersecurity &
- Risk Management : Identify, assess, and mitigate information security and cyber risks across business and technology environments.
- Cloud &
- Application Security : Monitor security posture across AWS/Azure/GCP, APIs, microservices, applications, and infrastructure.
- IAM &
- Access Management : Manage access controls, user privileges, IAM, Zero Trust, and maker-checker/segregation-of-duties controls.
- Vulnerability &
- Incident Management : Track VAPT findings, vulnerabilities, security incidents, threat alerts, and remediation closure.
- Third-Party Security : Conduct TPRM and security assessments for vendors, insurers, POSPs, and technology/API partners.
- Regulatory Compliance : Ensure compliance with IRDAI Cybersecurity Guidelines, DPDP Act,



and ISO 27001 requirements.
- DevSecOps &
- Secure SDLC : Work with Engineering/DevOps teams to embed security controls, secure coding, OWASP practices, and security testing into the SDLC.
- Security Audits &
- Assessments : Coordinate VAPT, internal/external audits, regulatory assessments, and closure of security observations.
- Security Monitoring &
- Reporting : Monitor SIEM/security alerts, maintain security MIS, track KRIs/KPIs, and report security risks and incidents to senior management.
- Security Awareness : Support cybersecurity awareness, access governance, incident response processes, and security training across the organization.

Key Skills :

Information Security, Cybersecurity, Security Governance, Cloud Security, IAM, TPRM, VAPT, Vulnerability Management, Incident Response, SIEM, DevSecOps, ISO 27001, IRDAI Compliance, DPDP, API Security.

📌 Information Security Professional (India)
🏢 SKILLVENTORY
📍 India