AVP, Security Tools Engineering

Key Responsibilities

• Administration of security tool’s infrastructure and support enterprise information security operations
• Develop and implement security policies and procedure to ensure data security and compliance in line with financial industry/sector standards
• Working experience in various encryption tools and technologies
• Work with vendors of security tools for support and enhancements
• Lead the design, implementation, and support of security tool enhancements
• Lead the definition/implementation of POCs (Proof of Concept) of security tools
• Manage enterprise-wide security tool monitoring mechanisms
• Prepare audit and compliance evidence/reports, lead, recommend and support solutions for requirements (i.e., GLBA, PCI, SB1386, SOX)
• Ensure expectations are met and ensure high customer satisfaction levels through established metrics against SLAs (Service Level Agreements)
• Benchmark and implement encryption/security best practices to mitigate potential threats to Synchrony's ecosystem, digital infrastructure, and operations
• Support the design and implementation of procedures and controls necessary to ensure and protect the safety and security of information systems assets, including prevention of intentional or inadvertent access, modification, disclosure, or destruction
• Understand business objectives, priorities, drivers, and technology focus areas
• As needed, act as a member of rapid response security operations/project support team, working under demanding deadlines, operating as team member as well as independently to resolve complex problems
• Perform other duties and/or special projects as assigned
• Required Skills/Knowledge:
• Hands-on experience with endpoint protection platforms like Endpoint encryption, File Scanning, Insider Risk Platforms, etc
• Expertise in deploying security solutions
• Proficiency in configuration and managing endpoint security tools
• Strong Ability to diagnose and resolve complex endpoint security issues
• Experience with change and incident management methodologies
• Experience working hybrid and multi-cloud (IaaS/PaaS/SaaS) environments
• Competency in using scripting languages such as PowerShell, Python or Bash for automating security tasks and developing custom tools
• Effective in documenting processes, reporting incidents, and collaborating with technical and non-technical teams
• Demonstrated experience coordinating and supporting complex enterprise projects, including endpoint security tools deployment, enhancements, integrations, and upgrades
• Desired Skills/Knowledge:
• Knowledge of industry regulations like PCI-DSS, HIPPA, GDPR, and how they apply to endpoint security
• Related information security certifications: CompTIA, ISACA, ISC2
• Strong analytical skills to perform problem solving, research opportunities / solutions
• Eligibility Criteria:
• A total of 5+ years of Information Security experience with a minimum of 3 years of operational experience implementing, and managing/supporting endpoint security tool platforms
• 4+ years of technical expertise in management of enterprise security tools
• 3+ years of hands-on experience in endpoint encryption technologies
• 3+ years’ experience with Windows, Linux, & Mac Operating systems
• Work Timings: 4:00 pm to01:00 am IST
• This role qualifies for Enhanced Flexibility and Choice offered in Synchrony India and will require the incumbent to be available between 06:00 AM Eastern Time – 11:30 AM Eastern Time (timings are anchored to US Eastern hours and will adjust twice a year locally). This window is for meetings with India and US teams. The remaining hours will be flexible for the employee to choose. Exceptions may apply periodically due to business needs. Please discuss this with the hiring manager for more details .)
• For Internal Applicants :
• Understand the criteria or mandatory skills required for the role, before applying
• Inform your manager and HRM before applying for any role on Workday
• Ensure that your professional profile is updated (fields such as education, prior experience, other skills) and it is mandatory to upload your updated resume (Word or PDF format)
• Must not be any corrective action plan (First Formal/Final Formal, LPP)
• L4 to L7 Employees who have completed 12 months in the organization and 12 months in current role and level are only eligible.
• L9+ Employees who have completed 18 months in the organization and 12 months in current role and level are only eligible.
• L09+ Employees can apply

Grade/Level: 11