The posting
This role is responsible for all design and delivery aspects of technology risk and cyber security, including successful coordination and outcomes of security control delivery, management of technology and cyber risks, and cyber security threat management for all Tech Mahindra Customers in the said region. In addition, the role provides supervision for risk and control advisory services to help protect customers, assets, systems, and data.
The role will work closely with Tech Mahindra’s Global ESRM teams to understand and align delivery of services to desired risk level, compliance and due diligence obligations as per Tech M Practices.
This would suit someone who is passionate about the security space and the emerging technologies within it and is able to lead others, drive strategy and has the ability to understand engagements, business drivers and security enablement opportunities as it relates to the greater business.
Candidate Experience & Expectations:
A Candidate with strong background in Information Technology & Security with exposure in Audit, Risk & Compliance Management.
You’ll have 15+ years of experience in IT with 7-10 years in leadership roles with increasing responsibilities across major projects and programs in Cyber/Infrastructure.
Candidate to be accountable for ensuring Tech Mahindra’s Enterprise Security & Risk Management portfolio customers & the contracted services across various regions are secured and managed in-line with agreed policies, frameworks, and standards. As the role is a mix of cyber, technical delivery and business development the person needs to be able to provide advice and hands on help with clients during cyber solution / project implementation.
You’ll have demonstrated experience leading diverse, delivery management teams through transformation and change while successfully managing audit, compliance across various business for SOX, PCIDSS, ISO, HITRUST…etc. for both internal, external, and regulatory requirements.
You will have established delivery frameworks and teams and matured them successfully uplifting the team’s effectiveness, outcomes and stakeholder satisfaction
You’ll have a high degree of political sensitivity, astuteness, and the ability to use the informal power structure of the organization to overcome obstacles and achieve portfolio success across large complex organisations with global stakeholders
You’ll have a strong understanding of SIEM (Security Incident and Event Management): threat hunting, vulnerability management, security monitoring, triaging incidents, creation of security incident reports, ability to build dashboards, running cyber exercises.
You’ll have significant experience in Information Security, with a good understanding of security operations, risk mitigation and compliance and a knowledge of ITIL Practices around Incident, Service Request, Problem and Change Management.
You’ll have excellent verbal and written communication skills, including the ability to explain and sell portfolio goals and objectives to the business and to technical leadership
You’ll have strong influencing and negotiation experience and skills in an environment with high competition for resources
You’ll bring exceptional leadership skills, with the ability to develop and communicate the portfolio objectives, inspire and motivate staff, and maintain alignment with business strategy
You’ll have demonstrated experience in Project management office functions and/or leading Project management teams as well as leading IT delivery teams
You’ll bring an understanding of current and emerging technologies and how organizations may apply them to drive digital business
Responsibilities:
You’ll manage and oversee delivery of cyber security, technology programs and projects in the region to Tech Mahindra standards.
You’ll review and redevelop the existing delivery framework, process and team and work closely with the relevant stakeholders to engage them on the journey towards a reusable and acceptable guideline for success.
You’ll be having a broader understanding of the cyber security threat landscape while also engaging with internal or external partners inline with procurement of services and or delivery of the same.
You’ll be Maintaining a stream of technology, security, soc teams current understanding of the technology threat landscape, compliance, and regulatory obligations.
Creating, implementing and operating a strategy for the deployment of information security technologies, policies and practices, focusing on continuous improvement.
You’ll delivering new security technology approaches and implementing next generation solutions for customers with a gamut of strong team members across various program’s with strong interpersonal skills and delegation amongst team or leads reporting to you.
You will be managing a team of thought leaders / delivery teams who will be delivering cloud platform security, cyber security solutions, information and data governance, data classification, DR, Governance risk & compliance within security.
You’ll also be managing a team who delivery DLP solutions, IDAM, Vulnerability, Remediation Management, SIEM Tools, CASB, Security Operations.
Internally this person will be a point of contact to provide guidance for the cybersecurity consultants, cybersecurity sales and product teams when necessary for cybersecurity offerings in solution tenders, RFPs and proposals.
The ideal person will actively contribute to Tech Mahindra cybersecurity community globally. This includes but is not limited to being a thought leader and an advocate for further education within Cybersecurity.
Manage regular cyber security testing initiatives, e.g. phishing exercises, penetration testing
You’ll be managing the daily operations of cyber security for various customers, including security incident response uplift and stability across the region.
You’ll support local and global IT leadership in overseeing, managing and using the entire life cycle of people, process & technology investments and initiatives to achieve the organization’s goals and objectives in cyber security.
You’ll be the primary contact for the investment council, steering committee and senior executives for communications, and for reporting the state and performance of cyber initiatives across the region.
You’ll make resourcing decisions to provide the best possible use of all resources and delivering the maximum value and benefits from cyber projects and programs within the portfolio.
You’ll identify, prioritize and coordinate project and program resources engaged with all or many of the initiatives within the project portfolio
You’ll lead a regional team of Project Managers, Delivery Managers, Digital managers, and Business Analysts
You will need to have proven experience in developing Information Security strategies, experience with Data Loss Protection and expertise in Risk Management Frameworks and Vulnerability Management. Combined with the ability to adapt your language to suit non-technical people.
