VP – Cyber Incident Response

A Leading Life Insurance Company is seeking an expert VP – Cyber Incident Response to head its information security department in Mumbai. In this high-impact management position, you will lead the Central Incident Response team, carrying out deep-dive investigations on suspected security threats. Furthermore, you will build and implement proactive threat hunting and digital forensics frameworks to safeguard the company’s IT ecosystem. Consequently, this role is vital for ensuring compliance with legal and regulatory cyber crisis guidelines.

The VP – Cyber Incident Response must excel at managing complex security incident situations, performing root-cause analysis over vulnerability scan reports. Additionally, you will constitute Computer Security Incident Response Teams for critical applications, designing log specifications and standard operating procedures. Therefore, the organization is looking for a presentable leader who conveys complex security concepts to technical and non-technical stakeholders. If you want to govern enterprise-level cyber resilience, this position offers an elite tier.

Key Responsibilities

• Lead the Central Incident Response team to isolate, prioritize, and remediate reported information security incidents.
• Perform deep-dive investigations, proactive threat hunting, and digital forensic activities on suspected network gaps.
• Conduct thorough root-cause analysis for security anomalies and collaborate with application owners for swift resolution.
• Constitute dedicated application CSIRTs, capturing log requirements, application designs, and data traffic flows.
• Create comprehensive standard operating procedures (SOPs) on incident handling for individual business applications.
• Provide specialized training to IT personnel and conduct regular tactical tabletop exercises and cyber drills.
• Ensure full compliance with regulatory cyber security guidelines issued by IRDAI, CERT-In, and parent group structures.
• Maintain, manage, and periodically update the corporate Cyber Crisis Management Policy, procedures, and plans.
• Prepare, review, and preserve a secure knowledge base of cyber incident playbooks for future audit reviews.
• Monitor phishing outbreaks and data loss recovery while securely analyzing external threat intelligence feeds.

Requirements and Qualifications

• Engineering, Management, or Post-Graduate degree (ME, MTech, MSc) from a recognized and approved university.
• Minimum 12-15 Years of total IT experience, with at least 8-10 years explicitly focused on extensive incident response.
• Prior background managing security operations, malware outbreaks, and persistent threats inside BFSI institutions.
• Advanced technical familiarity with regulatory frameworks, including IRDAI, RBI, CERT-In, and PCI DSS parameters.
• Highly preferred professional credentials: OSCP, ECIH, GCIH, CYSA+, CISSP from ISC2, or CISM from ISACA.