Sapphire Foods - IT Security Manager

Job Summary:

The IT Security Manager will be responsible for designing, implementing, and maintaining security policies, procedures, and controls to safeguard the organization's IT infrastructure, applications, networks, and data. This role includes risk management, compliance, threat mitigation, and incident response to ensure a robust cybersecurity posture. Candidate should be from non-NBFC background preferably from FMCG, QSR or Retail.

- Lead and mentor the security team to address findings from SOC, SIEM, VAPT reports, vulnerability assessments, source code reviews, and configuration audits.

- Plan and execute Red Team operations to identify and remediate security gaps.

- Perform penetration testing on thick-client applications, web apps, and communication infrastructure to strengthen defences.

- Conduct cloud security reviews and configuration audits for AWS and Azure environments.

- Implement and manage advanced endpoint security solutions (e.g., Trend Micro XDR, Crowd Strike).

- Proficient in Security Testing across dynamic and static applications, including SAST, DAST, SCA and VAPT for applications according to OWASP TOP 10 and SANS 25.

- Oversee vulnerability patch management for IT infrastructure and applications using tools like SecPod, Manage Engine.

- Utilize commercial and open-source tools (e.g., Burp Suite Professional, Kali Linux) for security testing.

- Perform network architecture reviews and firewall rule-base audits.

- Conduct threat hunting, attack identification, and correlation; recommend mitigation strategies.

- Execute VAPT for infrastructure, networks, web applications, and databases.

- Review and secure network devices (routers, switches, firewalls, Wi-Fi devices & VC systems) through periodic security testing.

- Manage Identity and Access Management, Azure AD, GPO policies, and O365 security configurations.

- Secure public cloud environments using best practices and compliance standards.

- Develop and maintain Business Continuity Plans (BCP) for cyber incidents and disasters.

- Ensure compliance with frameworks and regulations (CIS, NIST, DPDP Privacy Act).

- Collaborate with auditors for infrastructure and application security audits.

- Perform risk management by mapping criticality to CIA triad, evaluating threat actors (APT, cybercriminals), and conducting business impact analysis (uptime SLA, data loss, privacy risks).

- Developing and presenting monthly CISO dashboards and reports to board members, highlighting critical security findings.

• Participating in change management initiatives to ensure secure and compliant implementation of changes
• Conduct employee cybersecurity awareness programs and measure effectiveness.

- Train IT staff and end-users on phishing prevention, password hygiene, and data protection.

Technical Skills:

Vulnerability / Network Tool / Patch Management;

- Nessus Tenable-SC, Wireshark, Burp Suite, Kali Linux, Caldera, Thick Client, Red Team operation, Ethical hacking, penetration testing. SAST, DAST, SCA, for applications according to OWASP TOP 10 and SANS 25.

- Internal Audit & External Audit.

- Secpod. Manage Engine.

Security Devices: Cyber Ark, Bluecoat Proxy ASG-400, Site Wall WAF, AWS WAF, Fortinet NAC, Fortinet Firewall 400G and 40F, AWS Cloud Security, Intrusion detection System (IDS), Intrusion Prevention Systems (IPS), Trend Micro. SSL Certificate installation, TLS 2.0 etc

Network Devices: Cisco router, Cisco Switch, FortiGate Switch, FortiGate Switch.

Security Monitoring Devices: SIEM, SOC tool (IMB QRadar), Dark trace V3.0.5, Smokescreen tool, FireEye (threat detection), shadow map. Palalto Cortex SOAR. TM XDR.

Cloud: AWS, Azure

Programming language: c and c++ , .NET, Python.

Security Frameworks: NIST, SEBI, CERT-IN, CIS DPDP Act.

- Strong leadership and team management capabilities.

- Excellent problem-solving and critical-thinking skills.

- Effective communication for technical and non-technical audiences.

- Bachelor's or master's degree in Cybersecurity, Information Technology, or related field.

- 12-14+ years of experience in IT security, IT Infrastructure, Application Security, Network Security, or cybersecurity management from non-NBFC preferable from FMCG, QSR, Retail etc.

- Preferred Certifications: CISSP, CISM, CEH, CCSP, Certified Red Team Profession(CRTP), CompTIA Security+