Job Purpose The Security Configuration Specialist is responsible for designing, creation, review, and continuous improvement of Security Configuration Documents (SCDs) across enterprise systems, applications, and infrastructure.
The role ensures configurations align with industry standards, regulatory requirements and BFL security policies, reducing risk and enhancing system hardening.
The role validates and approves the configuration implementation reports and evidences as a defined calendar activity.
Duties and Responsibilities 1.
 SCD Development & Documentation • Develop Security Configuration Documents (SCDs) for - Operating systems, Network devices, Cloud environments (Azure, AWS, GCP), Databases, Middleware, and Applications • Define baseline configurations based on - CIS Benchmarks, NIST guidelines and OEM best practices • Ensure clear, structured, and standardized documentation of SCDs 2.
 Review & Validation • Conduct periodic SCD Reviews/Audits • Track and ensure closure within the TAT 3.
 Governance & Compliance • Ensure SCDs align with - BFL security frameworks & Regulatory requirements • Support internal and external audits related to SCDs • Track and manage exceptions and risk acceptances 4.
 Continuous Improvement • Regularly review and update SCDs to reflect - Emerging threats, Vulnerabilities and Technology changes • Incorporate lessons learned from - Security incidents, VAPT and audits 5.
 Collaboration & Stakeholder Engagement • Work with IT Teams (IT Infrastructure/CoE, DevOps/Cloud teams, Application Support, InfoSec Compliance, Data Privacy, SOC, Endpoint Security, Network, Database and Middleware etc.
) • Work with IT Compliance • Work with Corporate Audit • Ensure closure of regulatory observations and avoid recurrence through continual improvements 6.
 Automation & Documentation • Support automation of SCD enforcement using - Configuration Management and various Security Tools • Maintain central repository of SCDs and templates Key Decisions / Dimensions • SCD checks adequacy in-line with regulatory expectations • Exception handling Major Challenges • Document standardization across the IT landscape • Timely review and closure of all Secure Configurations • Exception handling and relevant documentation Required Qualifications and Experience a) Qualifications • Post-Graduate or Graduate with 5-7 years of experience in Security Configurations (Security baselines/hardening standards, Audit and Compliance Management) preferably in NBFCs, Banks, Fintech or regulated financial institutions.
b) Work Experience Technical Skills: • Strong understanding of - System hardening, Secure configurations, OS, Network, Cloud, Databases, Middleware, SOC, Endpoint Security and Applications • Knowledge of frameworks - CIS Benchmarks, NIST (800-53, 800-128), ISO 27001 controls and RBI requirements • Familiarity with - Vulnerability management tools, Configuration/Security tools • Basic scripting knowledge Soft Skills: • Team Management • Strong documentation and writing skills • Executive Dashboard preparation and reporting • Analytical and risk-based thinking • Stakeholder management and communication • Ability to standardize and simplify complex technical content