mPokket Looking for Information Security Officer at Bengaluru, Karnataka, India Full Time

• Develop and execute an overall information security strategy aligned with the organisation’s business goals, compliance requirements, and industry best practices.
• Define and communicate information security policies, procedures, and guidelines across the organization.
• Manage Information Security Operations
• Oversee day-to-day information security operations, including vulnerability management, threat detection and response, incident management, and security awareness training.
• Conduct regular security assessments and audits to identify potential vulnerabilities, risks, and compliance gaps.
• Collaborate with cross-functional teams to implement security controls, monitor security events, and mitigate potential risks.
• Lead AWS Infrastructure Security:
• Provide strategic guidance and technical expertise in securing AWS cloud infrastructure, services, and applications.
• Ensure the proper configuration and management of AWS security tools, including Identity and Access Management (IAM), Security Groups, VPC, CloudTrail, and CloudWatch.
• Design and implement security controls and measures to protect data and applications hosted on AWS.
• Develop and Manage Security Incident Response:
• Establish an effective incident response plan and lead the incident response team in handling security incidents, breaches, and potential threats.
• Conduct post-incident analysis to identify root causes and develop remediation strategies to prevent future incidents.
• Stay Updated on Security Trends and Emerging Technologies:
• Keep abreast of the latest information security threats, trends, and technologies to ensure the organization is adequately protected.
• Evaluate and recommend new security solutions, tools, and technologies to enhance the organisation’s security posture.
• Collaborate and Educate: Collaborate with internal stakeholders, including executives, IT teams, and employees, to promote a strong security culture and awareness throughout the organization.
• Provide guidance and support to project teams to ensure security considerations are incorporated into the development and deployment of new systems and applications.

Requirements

• A minimum of 6 years of experience in information security management, with at least 3 years in a leadership role.
• Extensive experience in designing, implementing, and managing information security programs, policies, and frameworks.
• Strong expertise in securing AWS infrastructure, including familiarity with AWS security services, best practices, and compliance frameworks (e. g., CIS benchmarks, RBI, GDPR, HIPAA, etc. ).
• In-depth knowledge of industry standards and frameworks such as ISO 27001 NIST Cybersecurity Framework, and PCI DSS.
• Design, document, test, maintain, and provide issue resolution recommendations for highly complex security, cryptographic technology solutions/protocols and algorithms.
• Decent experience with encryption, decryption or tokenization technologies
• Understanding of (format preserving encryption) FPE, tokenization and TDE (transparent data encryption) etc.
• Proven experience in managing security incidents, conducting investigations, and implementing incident response plans.
• Excellent leadership and communication skills, with the ability to collaborate effectively across different teams and departments.
• Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or AWS Certified Security – Speciality are highly desirable.

This job was posted by Debapti Roy from mPokket.