Vodafone Idea - Application Security Specialist - IT/Telecom Domain (10-12 Yrs) Mumbai (Others)

Role : Application Security Specialist Job Level/ Designation : L5 Function / Department : Technology Security Location : Mumbai Job Purpose : - To ensure that all critical information assets of Vodafone Idea Limited are identified, classified, assessed and protected from Cyber-attacks. To periodically identify security risks associated with the critical assets and ensuring that the same is mitigated adequately, and thereby maintain and enhance the security posture of Vodafone India through meticulous security solution delivery.
-Establish Security architecture framework, Implement and support projects for improving overall security and cyber security posture of the organization and meeting applicable requirements with expected delivery under stringent deadline.
-To assess security requirements and controls, and ensure that security controls are implemented as planned during application development or acquisition phases. Key Result Areas/Accountabilities : - Reviewing the solutions at design phase and provide proper guidelines so that security measures are incorporated at design phase.
-Evaluate all new solutions and ensure that all critical risk are identified, documented, tracked, reported and mitigated on time. Ensuring that no solution goes live without security approval.
-Own Application Security Policy, review the policy annually and update the same as per latest security trends.
-Ensure that Pan India VodafoneIdea infrastructure (production and Internet facing) is scanned for vulnerabilities every quarter and that the identified vulnerabilities are eliminated, mitigated.
-To develop a common set of security tools. Define operational parameters for their use, and conduct reviews of tool output.
-To perform control and vulnerability assessments to identify control weaknesses, and assess the effectiveness of existing controls, and recommends remedial action. Core Competencies, Knowledge, Experience : - IT and Telecom domain with experience in handling Application security and cyber security projects - Security core technical expertise in Application security, network security, Log monitoring and analysis, policy formulation, vulnerability analysis and risk analysis - Demonstration of proficient decision-making skills, analytical and problem solving ability. Must have technical / professional qualifications Professional Skills : - 08-10 years of full-time in Information Security and Cyber Security - Graduation/ BE./ B.Tech (Computers/ Electronics Telecommunications) - Specialist IT Security certification - CEH, CHFI, OWASP, ISO 27001, CISSP/CISA, or similar Years of Experience : 10-12 years of experience in project management in Industries to look from Telecom, Banking and other industry. Ideal Organizations to look from As mentioned above industries Direct reports : Head Security Assurance

Required Skills : English