Incharge GRC-Infra&Technology Risk Management role For a Leading Bank - Mumbai, India - Skill Ventory

Description

Roles and ResponsibilitiesGood Knowledge of Infrastructure Tools, Business Application and


ISO:
3Handson experience of identifying and facilitating closure of risks in areas of below tools:

Perimeter Security:
Firewall, WAF, Border/ Perimeter routersSIEM toolsInformation Security Knowledge : Appsec, VA, EPT, Source code etc.

Deception Technologies, Decoys, honey potsDatabase Monitoring tool:
DAM toolsIPS / IDSPIM / PAM tool functionality, configuration, best practices followed.
Infra Monitoring ToolsService / Change / Incident Management toolsID and Access Management Tools etc.

Handson experience of identifying and facilitating closure of risks in below areas:
Asset Classification and ControlBackup ManagementBCP & DRCapacity ManagementCloud securityCommunications and Operations ManagementIT ComplianceContractual Obligations & Service DeliveryData Center / Warehouse Security/Server roomDLPHuman Resource Security ControlIdentity and Access Control (Physical & Environmental / Logical)

Incident Management &GovernanceInformation Security AdministrationMedia & Information HandlingSDLCSecurity Training and AwarenessSub-ContractingPatch Management:
Understanding of Patch Management Process (OS, Middleware, Database ,Endpoint, Firmware and Environmental)

Types of Patches ( Security, Product ) etc.
Good understanding of CVSS scoring methodology and Framework (Base, Temporal, and Environmental)Patch Management tool and reports awareness:
Bigfix, SCCM etc.