Position                       Sr. Cyber Security Manager

No. of Positions           1

Overview :

The Senior Cyber Security Manager will be responsible for leading the security strategy, governance, and operations for the MY Bharat platform, ensuring end-to-end protection of data, infrastructure, and application layers. This role demands hands-on expertise in cloud security, application security, incident response, and compliance with MeitY and CERT-In guidelines. The candidate will play a key role in securing sensitive youth data, enforcing security policies, conducting audits, and fostering a security-first culture across development and operations teams.

Responsibilities:

1. Define, implement, and maintain the overall cybersecurity architecture and policy framework for the MY Bharat platform
2. Ensure compliance with CERT-In, MeitY, ISO 27001, and NCIIPC cybersecurity guidelines
3. Conduct regular vulnerability assessments, penetration testing (VAPT), and risk assessments across the entire stack (frontend, backend, cloud infrastructure, APIs)
4. Oversee security audits, threat modeling, and code reviews for secure software development lifecycle (SDLC)
5. Lead response to security incidents, including detection, containment, investigation, mitigation, and reporting
6. Collaborate with DevOps to implement secure CI/CD pipelines, infrastructure as code (IaC), and runtime protection mechanisms
7. Manage access control systems, identity federation (e.g., Keycloak), and authentication mechanisms (e.g., JWT, OAuth 2.0)
8. Guide the implementation of data encryption standards (AES-256, TLS), cloud security best practices, and network firewalls
9. Ensure regular backup, disaster recovery, and business continuity testing
10. Train internal teams and vendors on cybersecurity awareness and enforce adherence to policies
11. Stay current with emerging threats, attack vectors, and global best practices in cybersecurity

Qualifications:

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Technology, or a related field
• Minimum 8+ years of experience in cybersecurity roles with at least 3 years in a managerial or lead position
• Industry certifications preferred: CISSP, CISM, CEH, AWS Security Specialty, ISO 27001 LA, or OSCP
• Prior experience in e-Governance, large-scale public platforms, or critical infrastructure protection is highly desirable

Preferred Skills:

• Deep understanding of cloud security, including IAM, Security Groups, WAF, KMS, GuardDuty, etc.
• Experience with SonarQube or similar tools for static application security testing (SAST) and code quality checks
• Expertise in application security, network security, and endpoint protection
• Hands-on experience with VAPT tools such as Nessus, Burp Suite, OpenVAS, or equivalent
• Strong command of encryption protocols, SSL/TLS, public key infrastructure (PKI), and certificates
• Experience with SIEM tools like ELK Stack, OpenSearch, Wazuh, or Splunk
• Knowledge of compliance frameworks like ISO 27001, NIST, OWASP, SOC 2, and GDPR
• Strong analytical and forensic skills for log analysis, threat hunting, and incident response
• Familiarity with container security (e.g., Docker, Kubernetes security) and secure DevOps practices
• Strong documentation, audit reporting, and cross-team coordination capabilities

Consolidated Remuneration:

• Consolidated remuneration shall be commensurate with qualifications and experience within the approved project norms.

General Conditions applicable to all applicants covered under this advertisement:

1. Those candidates, who are already in regular or contractual employment under Central / State Government, Public Sector Undertakings or Autonomous Bodies, are expected to apply through proper channel or attach a ‘No Objection Certificate’ from the employer concerned with the application OR produce No Objection Certificate at the time of interview.
2. Digital India Corporation reserves the right to fill all or some or none of the positions advertised without assigning any reason as it deems fit.
3. Candidates shall disclose any actual or potential conflict of interest with Digital India Corporation or its projects.
4. Selected candidate shall furnish an Integrity and Vigilance Declaration and shall be required to maintain highest standards of ethics.
5. Any candidate found debarred, blacklisted or convicted of offences involving moral turpitude shall not be eligible.
6. The positions are purely temporary in nature for the project of Digital India Corporation and the appointees shall not derive any right or claim for permanent appointment at Digital India Corporation or on any vacancies existing or that shall be advertised for recruitment by Digital India Corporation in future.
7. Appointment shall remain subject to verification of educational qualifications, previous employment, antecedents and character.
8. If any information furnished by the candidate is found false or suppressed at any stage, candidature/appointment shall stand cancelled without notice.
9. Selection shall be made by a duly constituted Selection Committee as approved by the Competent Authority of DIC.
10. Personal information shall be processed solely for recruitment purposes in accordance with applicable laws.
11. Digital India Corporation is an Equal Opportunity Employer.
12. The maximum age shall be as on the last date of receipt of the applications. Screening of applications will be based on qualifications, age academic record and relevant experience. The designation of the selected candidates shall be mapped as per the existing designation policy of DIC.
13. In case of a query, the following officer may be contacted

Ms. Vinaya Viswanathan

Head - HR

Digital India Corporation

Electronics Niketan Annexe,6 CGO,

Complex Lodhi Road, New Delhi – 110003

Tel.: ‎+91 120 654 0800