Manager - Global Network Operations

Manager - Global Network Operations

About Company

Tata Communications Redefines Connectivity with Innovation and IntelligenceDriving the next level of intelligence powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media services and Network services, we at Tata Communications are envisaging a New World of Communications

Job Description

Cyber Security Operations Manager Job Descriptions and Key Responsibilities

1. Security Alerts Monitoring, Analysis & Triaging skills:
• Oversee the continuous monitoring of security alerts and events.
• Analyze logs and data from various sources (e.g., SIEM, firewalls, EDR, IDS/IPS, Applications, Cloud Services and Operating system such as Window, Linux and Unix) to identify suspicious activity.
• Perform advanced threat hunting and forensic analysis.
• Prepare security KPI’s report on weekly, monthly and quarterly basis and present to leadership for security insight view.
2. Incident Response and Management:
• Lead the incident response process, including identification, containment, eradication, and recovery to lesson learn and document it.
• Analyse and respond to complex security incidents and breaches to respective teams and stakeholders.
• Conduct post-incident analysis and develop reports with recommendations to prevent future incidents.
3. Vulnerability Management:
• Conduct regular vulnerability assessments, report preparation, prioritization and follow-up for mitigation.
• Identify, prioritize, and remediate security vulnerabilities in systems and applications.
• Collaborate with IT, development and cross functional teams to implement security patches and updates.
4. Security Architecture and Engineering:
• Design and implement security solutions to protect the organization's networks, systems, and data.
• Develop and maintain security policies, standards, and procedures.
• Evaluate and recommend new security technologies and tools.
5. Compliance and Risk Management:
• Ensure compliance with relevant regulatory requirements and industry standards (e.g., ISO 27001, PCS-DSS, SOC2 and NIST).
• Perform risk assessments and develop mitigation strategies.
• Document and maintain security controls and frameworks.

Required Skills and Qualifications

• Technical Expertise:
• Advanced knowledge of cybersecurity fundamentals, standards, techniques, and technologies.
• Proficiency in using security tools such as SIEM, IDS/IPS, firewalls, and endpoint protection solutions such as Anti-virus, EDR, DLP.
• Expertise in implementing and managing Identity and Access Management security controls and drive to meet the compliance requirements.
• Hands-on experience on Privilege Access Management and Multi-factor authentication tools.
• Experience with vulnerability management, penetration testing, and forensic analysis. Good to have working experience with Nessus, Qualys tools for vulnerability scanning.
• Experience:
• Minimum of 7-10 years of experience in managing 24X7 SOC operations, with at least 2-3 years in an L3 or senior role.
• Proven track record of handling complex security incidents and leading incident response efforts.
• Experience in designing and implementing security architectures and solutions.
• Certifications:
• Relevant certifications such as CISSP, CISM, CEH, GIAC, or equivalent are highly desirable.
• Analytical and Problem-Solving Skills:
• Strong analytical skills with the ability to identify and mitigate security threats.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Communication and Collaboration:
• Strong communication skills, both written and verbal.
• Ability to collaborate effectively with cross-functional teams and stakeholders.

Preferred Skills and Qualifications

• Experience with cloud security (e.g., AWS, Azure, Google Cloud).
• Knowledge of scripting and automation tools (e.g., Python, PowerShell).
• Familiarity with regulatory requirements and standards (e.g., ISO 27001, GDPR, PIC-DSS, HIPAA).

Skills

cyber security, siem, cloud security, cloud platform, hybrid cloud, intrusion detection system, intrusion prevention system, firewall, endpoint detection and response, data loss prevention, anti virus, privilege access management, multi factor authentication, identity and access management, vulnerability management, vulnerability assessment, penetration testing, security policies, security compliance