Total 2 Junior Executive job vacancies in Pune

Roles & Responsibilities:

•  

  Consultancy and Support towards Security and compliance controls with respect to various Bosch/Industry regulations

• Conduct compliance assessments and provide consultation on security frameworks, including ISO 27001:2022.

•  

  Engage with stakeholders, including managers, application owners, and technical teams, to assess security controls and document security compliance.

• Conduct and consult on gap analyses for security policies, controls, and procedures.

• Assist in developing and maintaining Business Continuity Management Plans (BCMP).

• Provide guidance on security best practices, including penetration testing, vulnerability scanning, encryption, and backup/storage security.

• Ensure security documentation is complete, accurate, and up to date.

• Assist in the implementation of security standards, policies, and regulatory requirements.

• Follow the roadmap as aligned with customer unit in completion of Policy implementations and controls in the Applications

• Prepare reports and documentation to demonstrate compliance with relevant standards

•  

  Ensure the customer KPI's, quality and deliverables are met

   

   

   

Skills:

• Know-how in IT systems

• Experience in Application Management Processes, Governance and Policies

• Knowledge of security concepts, including penetration testing, vulnerability scanning, encryption, backup and storage security, business continuity management, and application security.

•  

   

  Overview and Experience in Information, Project, IT Security and/or IAM and GRC Processes

• Work experience with GRC tools will be an added advantage

• Good working knowledge in MS office (Excel, word and PPT). Knowhow in excel functions (E.g., Pivot table, charts , lookup functions, etc.,)

•  

   

  Professional oral and written communication skills

•  

  Know-how on ITIL service management processes will be an added advantage

• Should be a good team player, flexible and deadline oriented

• Good verbal and written communication in English and German

Responsibilities:

• Conduct in-depth analysis and research to attribute cyber threats and attacks, including identifying threat actors, their motivations, tactics, techniques, and procedures (TTPs), and providing insights on their potential impact on the organization. Collaborate with internal and external stakeholders, to gather and share relevant threat intelligence for attribution purposes.
• Ability to classify, categorize, and analyze malware and threats.
• Monitor and assess the global threat landscape, including threat actors, malware, hacking techniques, and geopolitical events that may impact the organization.
• Collaborate with internal teams to provide timely and actionable intelligence to support incident response, vulnerability management, and other cybersecurity initiatives.
• Develop and maintain threat profiles, indicators of compromise (IOCs), and tactical reports to enhance detection and response capabilities.
• Perform root cause analysis and provide recommendations for proactive measures to help prevent future cyber attacks.
• Continuously update and refine existing threat intelligence processes and methodologies to ensure the organization remains at the forefront of cyber defense.
• Stay informed about the latest trends, tools, and techniques in the field of threat intelligence and incorporate best practices into daily operations.
• Present findings and insights to technical and non-technical stakeholders, including executives, to enhance overall cyber risk awareness.
• Adapts quickly to changing priorities, seeks new ideas, and re-align with team’s priority/roadmap to maximize business productivity.

Technical & Soft Skills:

• Good understanding of cyber threats, attack vectors, and common exploitation techniques.
• Proficiency in using threat intelligence platforms, open-source tools, and SOC technologies such as Google Chronicle SIEM, CrowdStrike EDR/EPP, Vectra NDR, Qualys VM, Recorded Future TI, etc.
• Good understanding of security frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain) and current threat landscapes.
• Proficiency with scripting (Python, PowerShell, etc.) and automating threat detection or hunting tasks.
• Ability to proactively find cybersecurity threats and mitigate them.
• Ability to obtain as much information on threat behaviour, goals and methods as possible.
• Knowledge about Advanced persistent threats and treat actors, their TTPs. Ability to recognize attack patterns and corelate them with specific threat actors.
• Knowledge of Analytics platforms for carrying out detailed analytics of obtained telemetry.
• Strong understanding of Windows, Linux, and network protocols.
• Good knowledge of industry frameworks and standards, such as STIX/TAXII, MITRE ATT&CK, and threat intelligence sharing platforms.
• Excellent written and verbal communication skills, including the ability to present complex technical information to both technical and non-technical audiences.
• Strong analytical and critical thinking skills, with the ability to analyze complex data sets and identify actionable insights.