Service Delivery Manager - Cyber Security
Location : Mumbai
Mode: 5 Days Work from Office
Job Description
- Experience and Manage delivery of cybersecurity services across DLP, Email security, Endpoint security, IAM/PAM, WAF, Encryption, Vulnerability management.
- Experience in managing teams delivering the following technologies required DLP- Forcepoint, Email security- Trend micro, Mime cast IAM- Silver fort, SailPoint.
- PAM-Arcos, CyberArk, WAF-Cloudflare, Imperva Encryption- Trellix, Symantec. Vulnerability Management- Tenable , Qualys.
- Compliance standards- SEBI/RBI , ISO 270001 etc. Define SLAs, monitor KPIs, and ensure timely execution of security initiatives.
- Act as the primary point of contact for internal teams and external vendors for security service delivery.
- Develop dashboards and executive reports on security posture, risk exposure, and delivery performance.
- Coordinate with audit teams for compliance readiness and evidence collection.
- Oversee vulnerability lifecycle management, including scanning, validation, and remediation governance.
- Utilize tools like Tenable/Nessus and Qualys for risk-based prioritization. Map vulnerabilities to business risk and track remediation progress.
- Ensure adherence to RBI Master Directions, SEBI Cybersecurity Guidelines, and DPDP provisions.
- Conduct gap assessments and maintain risk treatment plans.
- Support ISO 27001 audits and maintain ISMS documentation.
- Collaborate with infra/app teams, auditors, and leadership to address security gaps. Manage exceptions, compensating controls, and policy deviations. Maintain risk registers and GRC tools with automated updates and role-based access.
Qualifications & Skills:
- 12 to 15 years in cybersecurity service delivery, risk management, and compliance.
- Strong experience in managing security programs and vulnerability management.
- Should have managed team of 30 -50 members team.
- Familiarity with RBI and SEBI cybersecurity frameworks.
- Hands-on experience with Tenable/Nessus, Qualys, and GRC platforms.
- ISO 27001 Lead Auditor, CISSP, CISM, CRISC, or CISA. PMP or ITIL for service delivery management.
Key Skills
- Excellent communication skills with understanding of security technologies. Customer and stakeholder management. Service delivery governance.
- Risk quantification and executive reporting. Technical expertise in vulnerability management and compliance frameworks.