Job description
A Position Overview
Position Title
Manager Information Security
Department
TDABSG
Level/ Band
Manager/Sr. Manager
Role Summary:
The role overall responsibility is of providing Information Security (IS) Oversight to team within the Information technology, Application development, and Information Security Risk Management with a focus on Application Security, DLP, DAM, Cloud Security, IDAM, EDR/XDR, SOC, infrastructure, The team reviews the execution of requirements by Information Security to provide and maintain a consolidated view of effectiveness and sustainability for senior management while ensuring alignment to the Risk Management Framework. Specifically, evaluate the information security risks and controls across the enterprise to which the IS are held accountable, including policy, procedure, technical measure, guidelines, Standard operating procedure (SOP), policy design monitoring, control design, execution, and assurance.
Primary Responsibilities
. Security Operations Management.
. Develop and maintain Information and Cyber Security policy, standards, procedures, technical measures, and guidelines to support the organization-s information security program
. Run, control and manage SIEM, IDMA, XDR, IPS / IDS, Email Security, endpoint security, Cloud Security etc .. security programs.
. Co-ordination with Internal and external team.
. Coordinate and support following audits
ISO 27001:2013 Recertification/Surveillance Audit
ISO 27001 – Audit Preparedness Audit
IRDAI Cybersecurity Assurance Audit – Regulatory
ISNP Audit – Regulatory
AIA Integration with Information Security Policy
. Data Protection – Vendor Audits (Third Party)
Review controls implemented by third party before adaptation and implementation
Review implemented controls regularly to ensure security posture is maintained.
Support internal/external functions and partners with patching of security gaps.
. Assist Team in designing, implementing, maintaining, and improving security programs to address key company risks and prepare internal teams for internal assessments against wide variety of regulatory and compliance framework.
. Facilitate ongoing risk and compliance initiatives and monitor control effectiveness
. Collaborate with internal teams and external auditors throughout compliance assessments
. Support patching in identified gap areas
. Develop and Maintain review checklist and documents (Vendor/Third-party/Various standards/IRDAI/Internal etc.)
. Develop self-control list for IRDAI and ISO27001
. Improve controls by reviewing internal systems, processes, and policies
B Organizational Relationships
Reports To
AVP – Information Security
Supervises
Asst. Manager/Executives
C Job Dimensions
Geographic Area Covered
Pan India
Stakeholders Internal
All Departments
External
Partner/Third Parties
D Key Result Areas
. Develop and maintain Information and Cyber Security policy, standards, procedures, technical measures, and guidelines to support the organization-s information security program
. Run, control and manage SIEM, IDAM, XDR, IPS / IDS, Email Security, Endpoint Security, Cloud Security etc .. security programs.
. Collaborate with internal teams and external auditors throughout compliance assessments
. Coordinate and support Various audits
. Facilitate ongoing risk and compliance initiatives and monitor control effectiveness
. Improve controls by reviewing internal systems, processes, and policies
E Skills Required
Improve Security Program
Security Metrics
o Prepare Weekly, Monthly and Quaterly Security Metrics and provide updates to management
Conduct Audit
Work on reported Audit (Internal/External) findings and ensure closure of points within defined period.
Collaboration
Collaborate with internal teams and external auditors throughout compliance assessments
Coordinate with various stakeholders to ensure timely response and closure of observations raised in Internal/External Audit
Coordinating with IT Infrastructure Team for implementation of security controls.
Review implemented controls regularly to ensure security posture is maintained
Work closely with TCS, TALIC and Other internal and external stakeholders on requirements and deliver results as per expectation.
Update Checklist
Ensure compliance with various circulars or advisories provided by Cert-In, IRDAI, and other sources
Training
Evaluate general and specific training needs
To propose and prepare various employee training Program about IS Policy, Cyber Security.
To spread information security awareness and educate customers by creating periodic mailers
Risk Analysis
Review the IT infrastructure architecture from the information security perspective and advise countermeasures to the stakeholders to mitigate risks, at the design stage or new additional implementations
Maintain and update the risk register post coordination with stakeholders.
Behavioral
Essential
Desired
Interpersonal skills
.
Communication skills
.
Creative thinking skills
.
Supervising/Leadership skills
.
Teamwork Skills
.
Influencing skills
.
Relationship Building skills
.
Decision making skills
.
F Incumbent Characteristics
Essential
Desired
Qualification
M.Tech/M.Sc/B.Tech/B. E/BCA in computer science or Information Technology or Diploma holder
Must have any one of the following certifications
Experience
7+ years
At least 5+ years in Information security domain/function.
q
Proven track record of selling HARDWARE / PRINTER Infrastructure products i.e. Laptops – Desktops – Workstations – Servers and HARDWARE...
Apply For This JobJob Description Vendor Governance – Associate Position Overview Job Title: Vendor Governance Associate Corporate Title: Associate Location: Pune/Bangalore, India Role...
Apply For This JobRisk Advisory | Cyber| SAP IT| SAP DevOps What impact will you make Every day, your work will make an...
Apply For This JobJob Description We help the world run better Our company culture is focused on helping our employees enable innovation by...
Apply For This JobVisa Intelligence Consultancy has years of expertise to provide assistance for cross border careers. Visa Intelligence Consultancy is a group...
Apply For This JobJob Description The role is responsible for articulating and enforcing policies to protect organization information assets against internal and external...
Apply For This Job