General Manager - Global Information Security
About The Company
Tata Communications Redefines Connectivity with Innovation and IntelligenceDriving the next level of intelligence powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media services and Network services, we at Tata Communications are envisaging a New World of Communications
Accountable for managing the secured development, deployment, operations and lifecycle management for internal and external applications, AI platforms and projects as well as public and private cloud infrastructure across the organisation and al subsidiaries. Secure-by-design, DevSecOps transformation, AI model governance, and cloud security architecture across hybrid and multi-cloud environments.
Build security domain capability
Influence CoE, product and engineering functional leadership
Drive security culture in development teams
Application security
Define and implement enterprise application security strategy across all digital products and services. Collaborate with business and technology stakeholders to maintain ongoing security governance and address security risks associated with applications and digital platforms to provide security assurance for customer facing application platforms/services.
Embed secure SDLC (SSDLC) practices across engineering teams.
Establish DevSecOps frameworks integrated with CI/CD pipelines.
Oversee
SAST
DAST
SCA
API security
Mobile application security
Container and microservices security
Cloud Security
Lead security for multi-cloud and hybrid cloud environments including AWS, GCP, Azure as well as private cloud services
Define and implement enterprise cloud security strategy across all digital products and platforms. Collaborate with business and technology stakeholders to maintain ongoing security governance and address security risks associated with cloud infrastructure and automation.
Cloud security architecture and guardrails
CSPM and CNAPP governance
Identity and access security for cloud workloads
Cloud-native security monitoring
Container and Kubernetes security
Serverless security
Data security in cloud environments
AI Security and Governance
Develop enterprise framework for AI and ML security and risk management including,
AI model security
Protection against model theft and poisoning
Secure training data pipelines
Responsible AI governance
Adversarial AI threat mitigation
AI risk assessment and regulatory compliance
Establish AI security standards aligned with emerging frameworks such as: NIST AI RMF, ISO 42001, Responsible AI guidelines
Governance and Operational Responsibilities
Lead Implementation Of DevSecOps At Scale Including
Security testing automation in CI/CD pipelines
Container image security
Software integrity and artifact signing
Open-source software dependencies
Threat modelling
Security architecture reviews
API Security Governance
API discovery and inventory
API gateway security
Strong Knowledge Of
Application Security
OWASP Top 10
Secure coding practices
Application threat modelling
API security
Cloud Security
AWS / Azure / GCP security architectures
Kubernetes security
CNAPP / CSPM platforms
Zero Trust architecture
AI Security
AI model lifecycle security
ML pipeline security
AI governance frameworks
Engineering Practices
DevSecOps pipeline security
Infrastructure as Code security
Software supply chain security
Tata Communications Redefines Connectivity with Innovation and IntelligenceDriving the next level of intelligence powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media services and Network services, we at Tata Communications are envisaging a New World of Communications
Accountable for managing the secured development, deployment, operations and lifecycle management for internal and external applications, AI platforms and projects as well as public and private cloud infrastructure across the organisation and al subsidiaries. Secure-by-design, DevSecOps transformation, AI model governance, and cloud security architecture across hybrid and multi-cloud environments.
Build security domain capability
Influence CoE, product and engineering functional leadership
Drive security culture in development teams
Application security
Define and implement enterprise application security strategy across all digital products and services. Collaborate with business and technology stakeholders to maintain ongoing security governance and address security risks associated with applications and digital platforms to provide security assurance for customer facing application platforms/services.
Embed secure SDLC (SSDLC) practices across engineering teams.
Establish DevSecOps frameworks integrated with CI/CD pipelines.
Oversee
SAST
DAST
SCA
API security
Mobile application security
Container and microservices security
Cloud Security
Lead security for multi-cloud and hybrid cloud environments including AWS, GCP, Azure as well as private cloud services
Define and implement enterprise cloud security strategy across all digital products and platforms. Collaborate with business and technology stakeholders to maintain ongoing security governance and address security risks associated with cloud infrastructure and automation.
Cloud security architecture and guardrails
CSPM and CNAPP governance
Identity and access security for cloud workloads
Cloud-native security monitoring
Container and Kubernetes security
Serverless security
Data security in cloud environments
AI Security and Governance
Develop enterprise framework for AI and ML security and risk management including,
AI model security
Protection against model theft and poisoning
Secure training data pipelines
Responsible AI governance
Adversarial AI threat mitigation
AI risk assessment and regulatory compliance
Establish AI security standards aligned with emerging frameworks such as: NIST AI RMF, ISO 42001, Responsible AI guidelines
Governance and Operational Responsibilities
Lead Implementation Of DevSecOps At Scale Including
Security testing automation in CI/CD pipelines
Container image security
Software integrity and artifact signing
Open-source software dependencies
Threat modelling
Security architecture reviews
API Security Governance
API discovery and inventory
API gateway security
Strong Knowledge Of
Application Security
OWASP Top 10
Secure coding practices
Application threat modelling
API security
Cloud Security
AWS / Azure / GCP security architectures
Kubernetes security
CNAPP / CSPM platforms
Zero Trust architecture
AI Security
AI model lifecycle security
ML pipeline security
AI governance frameworks
Engineering Practices
DevSecOps pipeline security
Infrastructure as Code security
Software supply chain security
Recommended Jobs
Zuora Developer
Posted just now
TECHNO FUNCTIONAL CONSULTANT L1
Posted just now
Infrastructure Engineer
Posted just now
Solution Consultant, Intermediate - IND
Posted just now
Presales Data Analyst - Tool Admin
Posted just now