Assistant Manager - Captive Operations

Job Description:

Responsibilities

•  H-SSE & Zero Trust Architecture
• Implement Hybrid SSE architecture combining cloud-based SSE and on-prem security controls.
• Implement Zero Trust Network Architecture (ZTNA) with identity-based, role-based, and context-aware access.
• Define architecture for local internet breakout across bank branches and offices.
• Ensure high availability, redundancy, disaster recovery, and scalability.
•  Cloud-Based Security Service Edge
• Deploy and manage Cloud-based SSE to secure user access to:
• Internet websites
• Cloud applications
• SaaS platforms
• Implement advanced security controls including:
• Secure Web Gateway (SWG)
• CASB
• Firewall-as-a-Service (FWaaS)
• Advanced Threat Protection
• URL filtering and malware protection
•  On-Premises Secure Web Gateway
• Design and operate On-Prem Secure Web Gateway (SWG) for:
• Critical servers
• Internet-facing systems
• Integrate on-prem SWG with cloud SSE for unified policy enforcement.
•  Cloud-Based VPN / Private Application Access
• Implement Cloud-based VPN / Private Application Access for secure access to bank’s internal systems.
• Enable role-based and least-privileged access to applications.
• Ensure seamless integration with IAM, MFA, and device posture checks.
•  Data Loss Prevention (DLP)
• Implement DLP controls for internet and private application access.
• Prevent leakage of Bank’s sensitive data and PII in compliance with:
• RBI guidelines
• CERT-In directives
• Data privacy and localization mandates
• Define and enforce data classification and protection policies.
•  Local Internet Breakout & Global Offices
• Enable local internet breakout from branches/offices routed via H-SSE.
• Plan and execute migration of Internet Proxies at 10 foreign offices to H-SSE.
• Ensure compliance with country-specific regulatory requirements for foreign locations.
•  Compliance & Governance

Qualification & Experience

•  BE / ME (Computer / IT & Allied Branches / ECE)
•  B. Tech / M. Tech (Computer / IT / ECE)
• 5+ years of total experience out which 3 years of relevant experience in implementing and managing the SSE solution.