Job Title:  Assistant Manager | IT Audits | Mumbai | Cyber Strategy & Transformation

We are seeking a highly skilled and certified Cybersecurity & Data Loss Prevention Specialist with extensive hands-on experience in DLP policy management, incident response, SIEM/SOAR operations, and cyber compliance monitoring. The ideal candidate will have a strong understanding of endpoint security technologies and the ability to analyze and resolve complex security incidents across enterprise environments. The role requires strong technical, analytical, and stakeholder communication skills along with a deep understanding of regulatory frameworks.

Key Responsibilities:

1. Data Loss Prevention & Information Protection

• Develop, implement, and fine-tune DLP policies using platforms such as Symantec, Microsoft, and Forcepoint.
• Investigate and triage data leak incidents across endpoints, networks, and cloud systems.
• Reduce false positives and improve detection rates through ongoing policy optimization.
• Monitor DLP agents and coverage across thousands of endpoints to ensure compliance and mitigate data exfiltration risks.

2. Security Incident Monitoring & Response

• Manage and analyze high volumes of security incidents daily (up to 10,000+ events).
• Coordinate incident response activities and remediation efforts based on severity.
• Leverage SIEM tools (e.g., Splunk ES) and EDR/XDR platforms for threat detection and analytics.
• Maintain incident tracking dashboards and prepare detailed incident reports.

3. Risk & Compliance Management

• Conduct periodic risk assessments and vulnerability analyses across business units.
• Ensure compliance with data protection regulations such as DPDP, CCPA, HIPAA, PCI DSS, and ISO 27001.
• Participate in internal and external audits, manage control documentation and evidence collation.

4. Cybersecurity Reporting & Communication

• Prepare and present cybersecurity KPIs and threat intelligence reports to business stakeholders and management.
• Facilitate security awareness training sessions and build awareness around data protection best practices.

5. Project Management & Cross-functional Collaboration

• Collaborate with IT, business units, and external vendors to implement security controls.
• Oversee scope definition, stakeholder engagement, and vendor management for ongoing security programs.

Required Skills & Qualifications:

Technical Skills:

• Deep expertise in Symantec DLP (Endpoint, Network, Cloud) and experience with Microsoft/Forcepoint DLP
• Proficient with SIEM, SOAR, EDR/XDR, and Threat Intelligence
• Hands-on knowledge of Windows and Linux OS, scripting (Python/PowerShell), and networking protocols
• Strong command of Microsoft Excel (PivotTables, VBA, Power Query)

Certifications (Preferred):

• ISO 27001 Lead Auditor
• CISM / CISSP / CISA

Soft Skills:

• Strong documentation and reporting capabilities
• Excellent communication and stakeholder management skills
• Project management expertise with experience in budgeting and resource planning

Educational Background:

• Bachelor’s degree in Information Technology, (IT or CS) or

Masters in computer application (MCA)