Service Delivery Manager - Cyber Security

Location : Mumbai

Mode : 5 Days Work from Office

Job Description :

- Experience and Manage delivery of cybersecurity services across DLP, Email security, Endpoint security, IAM/PAM, WAF, Encryption, Vulnerability management.

- Experience in managing teams delivering the following technologies required DLP- Forcepoint, Email security- Trend micro, Mime cast IAM- Silver fort, SailPoint.

- PAM-Arcos, CyberArk, WAF-Cloudflare, Imperva Encryption- Trellix, Symantec. Vulnerability Management- Tenable , Qualys.

- Compliance standards- SEBI/RBI , ISO 270001 etc. Define SLAs, monitor KPIs, and ensure timely execution of security initiatives.

- Act as the primary point of contact for internal teams and external vendors for security service delivery.

- Develop dashboards and executive reports on security posture, risk exposure, and delivery performance.

- Coordinate with audit teams for compliance readiness and evidence collection.

- Oversee vulnerability lifecycle management, including scanning, validation, and remediation governance.

- Utilize tools like Tenable/Nessus and Qualys for risk-based prioritization. Map vulnerabilities to business risk and track remediation progress.

- Ensure adherence to RBI Master Directions, SEBI Cybersecurity Guidelines, and DPDP provisions.

- Conduct gap assessments and maintain risk treatment plans.

- Support ISO 27001 audits and maintain ISMS documentation.

- Collaborate with infra/app teams, auditors, and leadership to address security gaps. Manage exceptions, compensating controls, and policy deviations.

- Maintain risk registers and GRC tools with automated updates and role-based access.

Qualifications & Skills :

- 12 to 15 years in cybersecurity service delivery, risk management, and compliance.

- Strong experience in managing security programs and vulnerability management.

- Should have managed team of 30 -50 members team.

- Familiarity with RBI and SEBI cybersecurity frameworks.

- Hands-on experience with Tenable/Nessus, Qualys, and GRC platforms.

- ISO 27001 Lead Auditor, CISSP, CISM, CRISC, or CISA. PMP or ITIL for service delivery management.

Key Skills

- Excellent communication skills with understanding of security technologies. Customer and stakeholder management. Service delivery governance.

- Risk quantification and executive reporting. Technical expertise in vulnerability management and compliance frameworks.