Tata Group Hiring For Assistant Vice President – Information Security at Thane Full Time

Job description

A Position Overview

Position Title

Manager Information Security

Department

TDABSG

Level/ Band

Manager/Sr. Manager

Role Summary:

The role overall responsibility is of providing Information Security (IS) Oversight to team within the Information technology, Application development, and Information Security Risk Management with a focus on Application Security, DLP, DAM, Cloud Security, IDAM, EDR/XDR, SOC, infrastructure, The team reviews the execution of requirements by Information Security to provide and maintain a consolidated view of effectiveness and sustainability for senior management while ensuring alignment to the Risk Management Framework. Specifically, evaluate the information security risks and controls across the enterprise to which the IS are held accountable, including policy, procedure, technical measure, guidelines, Standard operating procedure (SOP), policy design monitoring, control design, execution, and assurance.

Primary Responsibilities

. Security Operations Management.

. Develop and maintain Information and Cyber Security policy, standards, procedures, technical measures, and guidelines to support the organization-s information security program

. Run, control and manage SIEM, IDMA, XDR, IPS / IDS, Email Security, endpoint security, Cloud Security etc .. security programs.

. Co-ordination with Internal and external team.

. Coordinate and support following audits

ISO 27001:2013 Recertification/Surveillance Audit

ISO 27001 – Audit Preparedness Audit

IRDAI Cybersecurity Assurance Audit – Regulatory

ISNP Audit – Regulatory

AIA Integration with Information Security Policy

. Data Protection – Vendor Audits (Third Party)

Review controls implemented by third party before adaptation and implementation

Review implemented controls regularly to ensure security posture is maintained.

Support internal/external functions and partners with patching of security gaps.

. Assist Team in designing, implementing, maintaining, and improving security programs to address key company risks and prepare internal teams for internal assessments against wide variety of regulatory and compliance framework.

. Facilitate ongoing risk and compliance initiatives and monitor control effectiveness

. Collaborate with internal teams and external auditors throughout compliance assessments

. Support patching in identified gap areas

. Develop and Maintain review checklist and documents (Vendor/Third-party/Various standards/IRDAI/Internal etc.)

. Develop self-control list for IRDAI and ISO27001

. Improve controls by reviewing internal systems, processes, and policies

B Organizational Relationships

Reports To

AVP – Information Security

Supervises

Asst. Manager/Executives

C Job Dimensions

Geographic Area Covered

Pan India

Stakeholders Internal

All Departments

External

Partner/Third Parties

D Key Result Areas

. Develop and maintain Information and Cyber Security policy, standards, procedures, technical measures, and guidelines to support the organization-s information security program

. Run, control and manage SIEM, IDAM, XDR, IPS / IDS, Email Security, Endpoint Security, Cloud Security etc .. security programs.

. Collaborate with internal teams and external auditors throughout compliance assessments

. Coordinate and support Various audits

. Facilitate ongoing risk and compliance initiatives and monitor control effectiveness

. Improve controls by reviewing internal systems, processes, and policies

E Skills Required

Improve Security Program

Security Metrics

o Prepare Weekly, Monthly and Quaterly Security Metrics and provide updates to management

Conduct Audit

Work on reported Audit (Internal/External) findings and ensure closure of points within defined period.

Collaboration

Collaborate with internal teams and external auditors throughout compliance assessments

Coordinate with various stakeholders to ensure timely response and closure of observations raised in Internal/External Audit

Coordinating with IT Infrastructure Team for implementation of security controls.

Review implemented controls regularly to ensure security posture is maintained

Work closely with TCS, TALIC and Other internal and external stakeholders on requirements and deliver results as per expectation.

Update Checklist

Ensure compliance with various circulars or advisories provided by Cert-In, IRDAI, and other sources

Training

Evaluate general and specific training needs

To propose and prepare various employee training Program about IS Policy, Cyber Security.

To spread information security awareness and educate customers by creating periodic mailers

Risk Analysis

Review the IT infrastructure architecture from the information security perspective and advise countermeasures to the stakeholders to mitigate risks, at the design stage or new additional implementations

Maintain and update the risk register post coordination with stakeholders.

Behavioral

Essential

Desired

Interpersonal skills

.

Communication skills

.

Creative thinking skills

.

Supervising/Leadership skills

.

Teamwork Skills

.

Influencing skills

.

Relationship Building skills

.

Decision making skills

.

F Incumbent Characteristics

Essential

Desired

Qualification

M.Tech/M.Sc/B.Tech/B. E/BCA in computer science or Information Technology or Diploma holder

Must have any one of the following certifications

• CEH
• ISO 27001
• ISO 31000
• CCSP
• CISA
• CISM

Experience

7+ years

At least 5+ years in Information security domain/function.

q