Manager - Information Security

Location

Mumbai | India

Job description

We are seeking a dynamic, and forward-thinking Enterprise Self starter, must be keen to learn, should be able to come up with creative solutions, should also posses qualities of building consensus.

What will you do

• Provides technical expertise in all aspects of enterprise information security compliance for all applicable regulations. Responsible for enterprise information security program, policy, and procedure documentation, enterprise information protection and enterprise security awareness program.
• Coordinate in the creation, implementation, and maintenance of appropriate enterprise programs, policies, and procedures to be compliant with all applicable regulations including NIST, ISO 27K
• Perform security assessment for new projects and current deployments
• Perform and take ownership in Vulnerability Assessment & Penetration testing activities
• Participates in internal and external audits and reviews to ensure compliance with regulatory standards, internal security policy, as appropriate
• Ability to understand and interpret laws and regulatory requirements related to information protection, and develop and implement appropriate processes to keep the Company in compliance and reduce legal liabilities
• Being the Escalation point within the team for any technical issues
• Developing the technical troubleshooting Knowledge base & mentoring the technical teams
• Manage performance of security devices/applications using relevant performance monitoring tools
• Compliance to set Process, SLAs and Project/Program Guidelines & standards
• Practical knowledge of Cyber Security Framework is a must
• Ability to organize, create, and deliver technical proposals and presentations to peers and management
• Knowledge of incident analysis, and incident response management
• Excellent skills in risk assessment processes, policy development, proposals, work statements, product evaluations, and delivery of technology
• Acts as a SPOC to process and respond to potential and actual security incidents, or alerts issued through the various Infosec programs as applicable to enterprise systems and operations

What you need :-

• 5+ years of relevant experience in Information and Security.
• Certifications good to have CISSP, CISA, CISM, CEH, Security+, CLIP for 27001
• SIEM practical knowledge will be an advantage
• Practical Knowledge on VAPT Tool like Open VAS , Kali Linux etc
• Knowledge on Secure Coding practices would help
• Understanding of security domains
• Strong oral and written communication skills and ability to transform technical knowledge into business language (e.g. reports, presentations, etc.)
• Experience in handling customer/user data and ensuring compliance

Job tags

Salary