Review and assess high‑risk security and access exceptions
Perform end‑to‑end risk analysis by evaluating architectural flows, network paths, identity boundaries, and trust relationships
Assess the impact of bypassing enterprise security controls
Partner with GIS, Software owners, Application teams, Network engineering teams, and Risk stakeholders
Track and facilitate closure or renewal of exceptions with defined ownership, rationale, and expiry timelines
Identify portfolio‑level trends and systemic risks
Publish and maintain risk dashboards and management metrics

Any Graduation / Post Graduation
15 to 20 years experience
Strong knowledge of Proxy architectures and internet access controls
Strong knowledge of IAM controls and identity risk scenarios
Strong knowledge of SSL/TLS encryption and content inspection concepts
Ability to analyze architectural diagrams, data flows, and control touchpoints
Risk-sensitive mindset with the ability to identify, escalate, and document high-impact security risks
Excellent written and verbal communication skills suitable for governance, audit, and senior stakeholders
Ability to manage multiple exception cases across portfolios while meeting governance timelines
Commitment to continuous learning in emerging threats, security architectures, and enterprise risk practices
Relevant information security certification preferred: CISSP, CISA, CSSLP, CEH, or equivalent

Technology Manager

Key skills