Description :

Job Description : IT Tech Cyber Security Specialist.

Experience : 10+ Years (IT), 5+ Years (Cybersecurity).

Location : Pune.

Role Overview :

We are seeking an experienced Cybersecurity professional with strong exposure to enterprise IT environments and hands-on expertise in cyber risk, vulnerability management, and control assessments.

The role involves reviewing Cyber Hygiene KPIs/KPCIs, identifying control gaps, and ensuring compliance with organizational and regulatory standards.

Key Responsibilities :

- Bring a minimum of 10 years of experience in Information Technology or a related field, with strong exposure to enterprise IT environments.

- Possess at least 5 years of specialized experience in Cybersecurity.

- Review, validate, and govern Cyber Hygiene KPCI (Key Performance and Control Indicator) assessments.

- Validate KPCI data submitted by control owners for accuracy, completeness, and compliance with organizational policies, standards, and regulatory requirements.

- Identify, analyze, and report control gaps using CHA methodologies in documentation provided by KPCI owners.

- Investigate vulnerability scanning issues across infrastructure, applications, and systems, and define appropriate corrective and preventive actions.

- Conduct technical quality assessments, including validation of false positives and assessment of risk severity and ratings.

- Prepare clear and comprehensive documentation and reports for both technical and non-technical stakeholders.

Technical Skills & Knowledge :

- Strong knowledge of Azure cloud platforms, enterprise networking, IT infrastructure, SQL, Excel, Confluence, and GitLab.

- Hands-on experience with vulnerability scanning tools, configuration management, incident management, and security monitoring tools.

- Solid understanding of risk management frameworks, cybersecurity controls, and applicable regulatory and compliance requirements.

Soft Skills :

- Excellent analytical and problem-solving abilities.

- Strong communication skills with the ability to explain technical concepts to non-technical audiences.

- High attention to detail and a structured approach to risk and control assessment.