Metropolitan Stock Exchange of India Looking for IT Security & Audit (ISMS) at Kurla, Mumbai, Maharashtra Full Time

IT Security & Audit (ISMS)

Location

Mumbai (Kurla – Piramal Agastya Corporate Park)

Qualification Profile

Diploma in Computers, IT, or Electronics; B.Sc. – IT_(ISO 27001 Lead auditor, CISA, CISSP/ Any Security related Certification

Experience

5 to 8 Yrs.

Job Responsibilities

IT Security & Audit (ISMS) :
Detailed Job description :

• Responsible for security risk assessments on new & existing IT Infrastructure applications to ensure strong risk management strategies, tools, frameworks and standards are in place. ~~ – Responsible for evaluation & implementation of Information/cyber security tools/technologies manage security projects, identifying gaps in existing infrastructure and ensure its closure. ~~ – Identify & provide analysis, recommendations of IT security risks and track corrective actions performed by respective department. ~~ – Verification of Fund lying with Stock broker, Cash and Cash equivalent and bank balances and Holding statement. ~~ – Participate in System & Network Audit, Cyber Security Audit, Internal Audit to establish compliance with securities policies..~~ – Must have previous IT Security experience in risk management, audits, compliance, security system development and operations vulnerability/penetration testing/patch management, red team/purple team exercise etc. ~~ – Liaises with internal/external stakeholders to manage information security activities with regards to SEBI, NCIIPC, CERT-IN, ISO 27001, ISO 9000 etc. ~~ – Define and facilitate the information security risk assessment process. ~~ – Ensure fulfill compliance requirements within stipulated timeline as received from SEBI, NCIIPC, CERT-In time to time. ~~ – Effectively interact with the communicate result to auditees, audit management and senior management. ~~

Technical Skills Required :

• Should have good knowledge on risk involved in various functions of IT Infrastructure and application and its mitigation. Knowledge on enterprise Data Centre Operations ~~ – Implementation, operation and maintenance of the Information Security Management System based on standards like ISO 27001, 9001~~ – Develop, maintain and publish up-to-date information security policies, procedures and guidelines.~~ – Implement Information / Cyber Security programs in compliance with relevant laws, regulations like SEBI.~~ – Knowledge on managing Anti-Virus, Firewall, IDS/IPS, VA/PT, AD, OS (Windows/Linux), Database etc.~~

Soft Skills:

• Good Communication and interpersonal skills. ~~