About FAI:First American (India) is a GCC (Global Capability Center) of the First American Financial Corporation (NYSE: FAF) family of companies, a proud member of the FORTUNE 500 companies and was named one of FORTUNE’s 100 Best Companies to Work For® in 2024. First American Financial Corporation provides comprehensive title insurance, closing/settlement, property data and technology solutions. First American (India) creates quality solutions for its customers by combining software, back office and knowledge processing operations to fulfill First American's business requirements. Our priorities are our employees, customers, and shareholders - in that order. FAI has been certified a Great Place to work by Great Place to work Institute®, is a certified Best Workplaces for Women and Workplace with Inclusive Practices. Job SummaryThe Information Security Engineering Manager will manage a group of talented Information Security Engineers who build and deploy solutions to protect First American’s technology and data. The team manages all aspects of endpoint security & network security across a wide variety of sources, including cloud, also team manages network security both on-prem and in the cloud (Azure, AWS, GCP, and OCI). This person will be responsible for managing projects, assigning resources, and providing technical expertise.Essential FunctionsManages a group of technical security professionals in the Information Security team.Contributes to project reviews and approves detailed designs and cost estimates for projects.Lead network security & endpoint security evaluations and assessments for any proposed technology solution.Participates in long-range departmental planning.Interfaces with management inside and outside of the company to provide input to operational decisions and to clarify or modify project plans, and/ or schedule requirements.Writes and conducts employee performance reviews and provides ongoing performance feedback. Makes hiring recommendations. May get input from senior management in these areas.Prepares and maintains job descriptions for positions that report to him/her.Regularly interacts with senior management and peers in other departments for purposes of gaining cooperation, exchanging technical information, and presenting project plans and reports.Required to perform duties outside of normal work hours based on business needs.Job Complexities Works on a diverse range of problems of moderate scope where analysis of situations or data requires evaluation of a variety of factors and an understanding of current business and technological trends.Exercises judgment within defined procedures and practices to determine appropriate action.Initiates corrective action needed to resolve complex, critical issues.Provides input to and may develop operational plans and works with senior management to ensure that plans are integrated with broader strategies.Supervision Received or ExtendedReceives assignments in the form of objectives and determines how to use resources to meet schedules and goals.Provides direction to employees within the boundaries of established policies.Enlists expertise of peers in other departments and a wide range of additional resources to explore new methods and approaches and to solve problems.Work is reviewed in terms of meeting product, project, or operational objectives, quality, schedules, and budgets.ImpactProvides input to department strategic plan and budget.Recommends changes to process, SLA’s, department policies, procedures, metrics, and standards. Influences senior management on decisions related to department priorities, schedules, plans and cost controls.Achieves objectives for multiple and varied projects.Regularly makes decisions necessary to resolve critical issues related to department operations.Knowledge and Skills/Technology UsedDeep understanding network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).Deep understanding of endpoint security concepts including technology, best practices, design, deployment, and operations.Understanding network security implementations (e.g., host-based IDS, IPS, access control lists), including their function and placement in a network.Experience with public cloud networking and security in a hybrid cloud environment.Expertise with Microsoft Defender security suites as well as other modern endpoint protection technologies such as: next-gen AV, EDR, XDR.Understanding network security implementations, including their function and placement in a network.Experience with public cloud and security in a hybrid cloud environment is preferred.Successful track record of designing, developing, and managing the execution of projects in the endpoint and/or security space.Ability to develop and implement processes to ensure compliance and quality.Ability to establish and maintain effective working relationships within and between departments.Ability to communicate the function’s vision and the department’s direction and set aligned goals for team. Provides resources and implements systems to measure results.Ability to select, coach and develop talent and hold employees accountable for results. Supports change and fosters collaboration.Deals with others in an honest manner, assures adherence to company policies, addresses questionable business practices.Provides others with reliable information, creates, and delivers accurate reports and presentations. Uses good listening skills. Negotiates effectively.Education Minimum of 15 years of formal education - Graduate / Postgraduate in Computer Science / Information Technology or equivalent experience is required.Training courses, seminars, certifications, or other security related education experience preferred.Preferred Experience 2 to 5 years of supervisory or management experience in progressively responsible roles in a demanding environment.License or CertificationCISSP (Certified Information Systems Security Certified Professional), CISA (Certified Information Systems Auditor), CISM (Certified Information Security Management) preferred.
Job Title
Information Security Manager