Roles and Responsibilities
You will be responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure that information assets and technologies are adequately protected. You will be identifying, developing, implementing, and maintaining processes across the enterprise to reduce information technology (IT) risks. You will respond to incidents, establish appropriate standards and controls, manage security technologies, and implement policies and procedures.
Key Responsibilities
Defining, scoping, creation & execution of IT & data security standards and strategies and measure adherence.
Firewall settings, WAF, security settings across tech stack, hardening and patching compliances and other Information Security Activities
Best Practices implementation for User Access Review for all application
Preparing, reviewing, updating, evidence management of all IT security related policies and procedures.
Enhancing the reliability and security of the IT systems, internal IT communication channels, projects, and underlying data.
Accountable for vulnerability assessment and IT Security Audits. Closure of all the observations
Ensure compliance with any related legislation, such as the Data Protection Act, ISO standards or relevant government regulations.
Manage incidents related to information security.
Best Practices in conducting the 3rd party vendor audit on Data and Information Security.
IT Security Awareness Programs. Oversee staff training in all the latest security awareness skills, check associated protocols, methodologies and procedures are implemented.
Strong Interpersonal skills. Ability to communicate clearly at all levels.
Good knowledge of IT Infrastructure and design.
Minimum Qualification
Bachelors or master degree in related technical field
10-15 years of experience in the field of security covering the key responsibilities listed above
Good knowledge of relevant standards such as ISO 27001 / SOC2
Good to have
Certifications such as CISM / CISSP / CRISC
Good understanding of current legislations and regulations pertaining to the financial sector including IRDAI standards & audit terminologies.