Key Roles and Responsibilities:

Information Security & Risk Management

Lead and manage Information Security projects across MHIL.

Conduct security assessments for newly onboarded IT projects to ensure compliance with security policies and standards.

Identify, analyze, and mitigate technical security risks across the organization.

Vulnerability & Threat Management

Plan and manage Vulnerability Assessment and Penetration Testing (VAPT) activities, including coordination with internal teams and external vendors.

Perform configuration reviews and security hardening of systems, applications, databases, and network devices.

Endpoint & Infrastructure Security

Manage Anti-Virus (AV) and Endpoint Detection & Response (EDR) solutions, including deployment, monitoring, and policy enforcement.

Implement and monitor Patch Management processes to ensure timely remediation of security vulnerabilities

Application Security

Conduct Application Security assessments, including secure code review (as applicable) and application vulnerability testing.

Work closely with development and project teams to integrate security controls into the application lifecycle (SDLC).

Security Monitoring & Incident Response

Support SIEM/SOC operations, including log monitoring, alert analysis, and threat investigation.

Participate in Incident Response activities, including detection, containment, investigation, and remediation of security incidents.

Assist in developing and maintaining incident response procedures and playbooks.

Governance, Documentation & Compliance

Prepare and maintain security documentation, risk reports, and assessment findings.

Provide security guidance, awareness, and best practices to IT and business teams.

Key Skills & Competencies:

Strong hands-on experience in VAPT and Technical Risk Assessments

Expertise in Application Security and Infrastructure Security

Experience with AV/EDR tools and endpoint security solutions

Knowledge of Patch Management tools and processes

Hands-on experience in Configuration Assessment and System Hardening

Working knowledge of SIEM/SOC operations and Incident Response

Cyber Security Supervisor