MBSS Security Lead (Hardening & Compliance)

The MBSS Expert is a technical subject matter expert. They are responsible for the end-to-end execution of Minimum Baseline Security Standards. This role focuses on the high-level technical design of security hardening controls. These controls are for Telecom & IT nodes. The expert oversees compliance assessments. They also support the governance of MBSS compliance. This covers various Lines of Business (LOBs). It also includes Managed Service Providers (MSPs) for a telecom network.

Must-Have:

1. B.E. / B.Tech degree in Computer Science, IT, or Electronics & Telecommunications, coupled with a CISA or CISSP certification.
2. 12-15 years of professional experience in the field.
3. Deep knowledge of CIS Benchmarks, NIST, and hardening for various OS/OEM products (especially Telecom & IT), with proven experience in creating baseline standards for diverse OEMs.
4. Good hands-on experience with Telecom Nodes (2G-5G Products), including architecture know-how of Core, RAN, Tx & IP Fabric networks and elements.
5. Proven experience managing security compliance across 50,000+ nodes using automated tools (e.g., Blade Logic) and coordinating large-scale remediation projects across MSP and OEM environments.

Nice-to-Have:

1. C-SANS (GCWN / GCUX) for Windows/Unix expertise.
2. CCNP Security or Nokia NRS II.
3. CCSP or Azure Security Engineer.

• Design and develop MBSS hardening control templates, including command collections and validation methods, for diverse node architectures, vendors, and OS/software versions.
• Ensure hardening guidelines align with industry security standards and collaborate with OEMs for control validation and deployment sign-off.
• Oversee quarterly security compliance scanning for a large network of 120,000+ nodes, supporting year-over-year growth.
• Validate MBSS compliance and provide "Go-Live" approvals for approximately 1,000 new nodes entering the production environment monthly.
• Provide expert support to the MBSS tools team during First Node Implementation (FNI) and mass rollouts.
• Lead weekly operational governance meetings with clients, asset custodians, LOB SPOCs, and Managed Service Partners (MSPs).
• Track and follow up on the remediation of non-compliances according to defined escalation matrices and timelines.
• Deliver monthly compliance reports and weekly operational governance summaries to stakeholders.