Job Description

.Department/ Division-IT .Job Title-Chief Information Security Officer (CISO) .Level in the organization-SMGR/ AGM .Educational Qualification-BE / B. Tech/ MCA/ MBA from Premier Institute .Work Experience (Years):13-15 years .Role: Experience and exposure to Information Security & Cyber Security in a professional enterprise and minimum 8-10 year\'s managing Information Security standards with exposure to ISO 27001 standards.\' Key Responsibilities: .A Leadership Role to Define and Implementation of Cyber Security including Information Security Policy at company level (Including all business units Regulatory and compliance requirements) and monitoring the same. .Supports CIO in implementing the company wide Information Security strategy and roadmap and ensures alignment of all IT Activities with IT Security Strategy. .Responsible for defining all required standards, policies, procedures, device configuration documents i.e., hardening documents, forms, guidelines, awareness, training wrt Information Security & Cyber security. .Monitor SOC for all Cyber Security, Information Security and Data Privacy Incidents Management .Liaises with external agencies, such as law enforcement and other advisory bodies as necessary. .Conducting a continuous assessment of current IT security practices and systems and identifying areas for improvement .Running security audits and risk assessments .Devising strategies and implementing IT solutions to minimize the risk of cyber-attacks. .Responsible for protecting organization\'s computers, networks, data, and Privacy against threats, such as security breaches, computer viruses or attacks by cyber-criminals. .Business Continuity and Disaster Recovery - Revise periodically as required by business and ensure continued compliance with established Business Continuity policies and procedures. .Report on Information Security project metrics on a regular basis collaborating with IT functional leaders to address gaps. .Responsible and accountable for Cyber Security, Information Security and Data Privacy health for the organization. .Risk Assessment, Mitigation and Reporting \' Competencies / Skills .CISM, CISSP, CISA, CCSP Certified .ISO 27001 Certified Lead Implemented and Lead Auditor .Data Centre and Public / Private Cloud operations Knowledge .SOC Setup and Operating Knowledge .ITIL V3 Certified .PMP Certification preferred. .Strong overall Information Security skills .Strong overall Data Privacy Protection skills\' Soft Skills .Assertiveness, Strong Communication Skills .Team Player .Business Process Documentation .Ability to take initiatives and challenge the status quo.\'

foundit