Job description:

"15+ years of broad-based experience in information security, IS audit, and technology project management, in sensitive and strategically challenging environments
Managing the cybersecurity program (20+ work streams) for re-architecting the overall security posture of the organization under a $36M firm-wide Cybersecurity Risk Reduction Program, enabling the organization to address FRB issues.
Architecting and implementing a multimillion-dollar Global SIEM/ SOC solution. To centralize and standardize the logging, monitoring, and security threat detection regime. Inspected security and resilience of IT infrastructure, controls, and operations of more than 15 banks & DFIs.
Led architecting, designing, impending, and operationalizing of major work streams like new SIEM rollout (LogRhythm), Data Loss Prevention (DLP) controls, Cloud Assess Security Broker (CASB) controls, authentication controls and credential management, application whitelisting, anti-phishing controls, data classification and email protection, UEBA/ XDR, external exposure (deep web) and user awareness.
Performed various firewall configuration & Penetrations testing control analysis based on PCIDSS, ISO27001, COBIT, COSO, OWASP & other risk frameworks.
Supported security and compliance objectives for Acquia s Paas and SaaS products including managing SSAE16, SOC, FISMA/ FedRAMP, PCI-DSS, and ISO27001 audits
Developed various Information Security Play Books on handling malware, ransomware outbreaks, DDoS attacks, phishing attempts, forensics, data leakage web presence defacement/ compromise, etc.
Creating and fine-tuning various threat and anomaly detection rules in Splunk, covering scopes around user activities, malware, network anomalies, DDoS, changes in system variables, AD attacks, etc.
Created policies, procedures, playbooks, escalation/ response KRIs/KPIs, and periodic reporting requirements/ templates to govern and manage Global SOC operations.
"

• Prepare detailed documentation including templates and frameworks for a cybersecurity solution to be proposed
• Carry out scoped studies including Risk analysis, Gap analysis for clients to technical solutions and document the findings and solution
• Ability to write innovatively and present frameworks that are developed for solutions
• Ability to define the opportunity and identify teams based on skills required and derive costing
• Define specific performance measures, targets, and goals to enable clients to measure success; articulate how the metrics contribute to the business case and link to client's overall strategy or mission