Company Overview :

Ernst & Young LLP India is a leading global professional services organization that provides assurance, tax, consulting, and strategy and transactions services. We operate across a wide range of industries, helping companies navigate complex business challenges and achieve their growth objectives. Our commitment to building a better working world extends to our clients, our people, and the communities we serve.

Role Overview :

As a Manager - Secret Management, you will be responsible for leading and managing the organization's secret management program, ensuring the secure storage, access, and rotation of sensitive credentials and secrets. You will collaborate with various teams, including security, infrastructure, and application development, to implement and maintain robust secret management solutions. Your work will directly contribute to reducing the risk of data breaches and unauthorized access, safeguarding the organization's critical assets and maintaining customer trust.

Key Responsibilities :

- Develop and implement a comprehensive secret management strategy aligned with industry best practices and organizational security policies to minimize risk exposure.

- Manage and maintain the organization's secret management infrastructure, including HashiCorp Vault, CyberArk PAM, and other relevant tools, ensuring high availability and performance.

- Define and enforce access control policies and procedures for secrets, ensuring that only authorized personnel and applications can access sensitive information to prevent unauthorized access.

- Automate secret rotation and lifecycle management processes to reduce the risk of credential compromise and ensure compliance with security standards.

- Conduct regular security assessments and audits of secret management practices to identify vulnerabilities and implement remediation measures to strengthen security posture.

- Provide guidance and training to development teams and other stakeholders on secure secret management practices to promote a security-conscious culture.

- Collaborate with security incident response teams to investigate and resolve security incidents related to secret management to minimize impact and prevent recurrence.

- Stay up-to-date with the latest trends and technologies in secret management to continuously improve the organization's security posture.

Required Skillset :

- Demonstrated expertise in designing, implementing, and managing enterprise-grade secret management solutions using HashiCorp Vault, CyberArk PAM, or similar technologies.

- Proven ability to develop and enforce security policies and procedures related to secret management, access control, and credential rotation.

- Strong understanding of authentication and authorization protocols, including IAM principles and best practices.

- Excellent communication and interpersonal skills, with the ability to effectively collaborate with cross-functional teams and stakeholders.

- Ability to analyze complex security issues, identify vulnerabilities, and implement effective remediation measures.

- Bachelor's or Master's degree in Computer Science, Information Security, or a related field.

- Adaptable to work in a hybrid environment, collaborating with teams across Bangalore and Chennai.