Assistant Vice President - Network and Database Security Operations

About Us

SBI Card is a leading pure-play credit card issuer in India, offering a wide range of credit cards to cater to diverse customer needs. We are constantly innovating to meet the evolving financial needs of our customers, empowering them with digital currency for seamless payment experience and indulge in rewarding benefits. At SBI Card, the motto 'Make Life Simple' inspires every initiative, ensuring that customer convenience is at the forefront of all that we do. We are committed to building an environment where people can thrive and create a better future for everyone.

SBI Card is proud to be an equal opportunity & inclusive employer and welcome employees without any discrimination on the grounds of race, colour, gender, religion, creed, disability, sexual orientation, gender identity, marital status, caste etc. SBI Card is committed to fostering an inclusive and diverse workplace where all employees are treated equally with dignity and respect which makes it a promising place to work.

Join us to shape the future of digital payment in India and unlock your full potential.

What’s in it for YOU

1. SBI Card truly lives by the work-life balance philosophy. We offer a robust wellness and wellbeing program to support mental and physical health of our employees
2. Admirable work deserves to be rewarded! We have a well curated bouquet of rewards and recognition program for the employees
3. Dynamic, Inclusive and Diverse team culture 
4. Gender Neutral Policy
5. Inclusive Health Benefits for all - Medical Insurance, Personal Accidental, Group Term Life Insurance and Annual Health Checkup, Dental and OPD benefits
6. Commitment to overall development of an employee through comprehensive learning & development framework

Role Purpose 

Responsible for reviewing, operationalizing and maturing overall security controls for Databases. This role is also responsible to serve as a security expert in data/base design, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices and establish data protection strategy.

Role Accountability 

Network Security Management:

1. Serve as a Network Security expert in Network design & Implementation, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices
2. Design framework to include database security review for installation, database migration and development of new features/functionality
3. Collaborate with systems, network, database, vendor teams to ensure security is maintained at all layers
4. Develop framework for securely implementing, integrating and managing Network 
5. Prepare Network hardening standards in-line with organization's security policy
6. Conduct Network Architecture Review periodically inline with the Policy requirement
7. Conduct Firewall Configuration & Rule Review periodically inline with the Policy requirement

Database Security Management:

1. Serves as a security expert in database design, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices
2. Establish data protection strategy and coordinate data protection solution design, architecture and implementation
3. Lead secure configuration assessment of databases
4. Implement, maintain and review database security standards, guidelines and operational policies and procedures 
5. Develop framework for secure implementation and management of databases 
6. Manage preparation of database hardening standards in-line with organization's security policy
7. Provide consultation to DB admins on key Cyber Security risks and mitigations (technology and manual) around database integrations & implementations
8. Ensure consulting on full life cycle and building capability of  Database Activity Monitoring and related technologies
9. Review application's access to the database structures
10. Design and review appropriate users/authority/roles within the Database
11. Maintain and monitor database security, integrity and access controls
12. Ensure process documentation and compliance adherence

Measures of Success 

1. Successful development and operationalize  Database security programmed
2. Setup and Increase in maturity of Network security Programs (Adoption & Capabilities)
3. Successful Database & Firewall security implementation, upgrade and life-cycle management
4. Hardening of network and database as per policy
5. Implementation of security controls as per policy
6. Related security metrics within acceptable threshold
7. Availability of DAM services in line with the enterprise expectations
8. Resolution of all technical issues reported by users within agreed TAT
9. Timely updation of DAM related SOPs and other documents 
10. No adverse observations in Internal / External Audits 
11. Process Adherence as per MOU

Technical Skills / Experience / Certifications

1. Technical knowledge and Work experience on
   1. Operating Systems - Unix/Linux/Window Servers etc.
   2. Network technologies - Firewall, IPS, VPN, APT, proxy etc.
   3. Databases - MySQL, Oracle, SQL etc. 
2. Hands on experience of implementing and operating Database Activity Monitoring (DAM) in a complex hybrid environment
3. Well versed with key Cyber Security risks and mitigations (technology and manual) around database integrations & implementations
4. Industry standard certifications such as Oracle / SQL DBA,  CISSP etc.

Competencies critical to the role

1. Stakeholder Management 
2. Analytical ability 
3. Process Orientation
4. Problem Solving
5. Detail Orientation

Qualification 

Bachelor degree / B.tech in Computer Science / IT or related area

Preferred Industry

BFSI / NBFC /E-commerce/IT & ITES / Telecom