AVP - Security Operations Center - Information Security/Compliance - BPO

Specific Competence (Essential) :

- Having hands on experience on various security tools & Technologies - SIEM, IPS/IDS, VPN, DLP, Firewalls, Encryption and Vulnerability Assessment & Penetration Testing tools.

- Understand Information security and compliance metrics

- Focus and drive operations rigor in vulnerability assessment and remediation effort

- Collaborate with global and vendor teams

- Work with product vendors and support partners

- Manage customers / auditors while supporting audits

- Drive automation in vulnerability assessment and remediation efforts

- Manage relevant product life cycle management, vendor engagements etc.,

- Good technical knowledge about End points, servers, Operating system, etc.

- Experience in DLP endpoints, Antivirus, patching, endpoint controls like USB etc.,

- Knowledge about vulnerability assessment tools

- Knowledge about certifications like ISAE, SOX, etc.

- Experience in managing security operations

- Experience in handling audits/auditors

- Excellent communication skills

Key Roles and Responsibilities :

- Identify and prioritize information security risks through proactive risk assessments and management communication

- Manage security operations to ensure compliance and security metrics SLAs are delivered

- Drive implementation of required controls as per organizational and customers compliance requirements viz. SAS-70, ISO-27001, SOX, PCI etc.

- Study & recommend industry best practices, latest trends for continuous improvement of information security

- Monitor & review performance of security controls and policy compliance through metrics/ dashboards/internal audits and drives corrective/improvement plans

- Conduct security reviews for 3rd Party associations globally and ensure appropriate controls are implemented to prevent or reduce security risks

- Develop and implement security awareness program

- Provide necessary inputs required while transitioning client processes and providing support from an information security perspective to ensure client information security requirements are fulfill