Tata Croma Reporting to: Chief Digital Officer Department: IT & Digital Transformation Description: Information Security - Business Partnering : - Trusted advisor and single point of contact to Business for the solutioning and deployment of Information security solutions across the entire enterprise IT landscape and GDPR compliance. - Build strategic roadmap on information security policies and risk management for data-driven organizations in accordance with ISO standards. - Drive engagement with business on data sensitivity and classification levels, data exchange, and access controls in internal systems and external systems which are consumer-facing. - Develop SOPs on User Access controls and Role authorizations for all the users. - Drive User Awareness and Training Programs. Information Security - Delivery : - Deploy strong cyber/information security framework and solutions on cyber security protection, detection, response, and recovery. - Set Up Risk & Threat Monitoring systems in the internal and external environments. - Deploy Information Security solutions VPN, Email Security Solution, RSA token access, Firewalls and multi-level authentication of Servers, robust Admin based access controls, Data Security and Data Privacy across company information systems - SAP ERP, CRM-SFDC, SAP HYBRIS, Core Database, Network and Infrastructure which includes Stores, Corporate and Regional offices, WFH, Supply chain and Consumer/ Customer facing touchpoints systems - Mobile & Web Applications, Company website, Social Media, Digital/IoT assets in the retail environment. - Build strong IT partner for critical capabilities like threat monitoring, intelligence, VAPT, and engage with infrastructure, SAP, SFDC, and Data teams for delivery of security solutions. Information Security Audit : - Conduct quarterly IT audit on Information Security - Server, Network, Computer, Internet, VAPT, Company information systems - SAP, SFDC (Sales force.com), HYBRIS, Consumer/Customer-Facing Mobile and Web Apps, Website, Digital/IoT assets, etc. Information Security Operations : - Drive operation excellence through improved business governance on data management, system controls, Identity, and Access management - Monitor network and application performance to identify any irregular activities. - Monitor regulation compliance, internal and external policy compliance. Team Management: - Will have to build and lead a team of 4-5 members. - Providing best-practice knowledge and innovative methods to set the team up for success - Educate & empower the team to become better at providing exceptional output Collaborate with stakeholders effectively: - Ensure clarity of actions within different teams within Croma - Ensure a smooth transition between different stages of engagement - Ensure clear work prioritization with engineering and service delivery management Experience: - 12 to 15 years of Information and Cyber Security experience in managing multi-site locations in a manufacturing organization across Indian and Global in a regulatory environment. - 2 to 3 life cycle of design and implementation of Cyber Security Solutions for Businesses with a strong focus on data protection, management, IT, and Business controls. - Proven experience in improving the maturity level of cyber security for the organization. - Understanding of TCP/IP, Networking ports and protocols, traffic flow, system administration, defense-in-depth, and common security elements. Strong Analytical skills in problem resolution - Experience with regulatory compliance issues and resolution - Understanding of Data Sensitivity, classification levels, and experience of deploying security policies in Applications like SAP, SFDC, Mobile and Web Apps - internal and consumer-facing, and Database/Data warehouse. - Understanding of India and International IT laws, Regulations, and ISO 27001 - Proficiency in Anti-Virus, Malware protection, Host-based Forensics, Network Forensics, RSA Security - Understanding of Mobile Technology and OS (Android, IOS, Windows), VM ware technology, and Microsoft suite of solutions. - Audit experience of InfoSec methodologies, Financial controls, Sox compliance, GDPR, etc. - Advanced certifications like CISM, CISA, CEH (Certified Ethical Hacker) are preferred Desired Competencies: - Analytical Skills - Problem-solving skills - Collaboration Skills - Team Management - Eye for Detail

Mumbai

Head - Cyber Security/Audit & Compliance - IT 

Head - Cyber Security/Audit & Compliance - IT  ,Job Description for Head - Cyber Security/Audit & Compliance - IT  in Seven N Half in  Mumbai for (12-16) years of experience. Apply Now!

Job Description for Head - Cyber Security/Audit & Compliance - IT  in Seven N Half in  Mumbai for (12-16) years of experience. Apply Now!