Lead - Information Security - IT Firm

CTC : Upto 22 LPA Gross (including variable )

Notice Period : 1 month

Work Experience : 8 yrs (Min) - 12 yrs (Max)

Qualifications : Bachelor's degree in Information Systems or equivalent work experience

Target Sector : Any reputed Organisation

JOB DESCRIPTION FOR THIS ROLE :

Primary Skills :

- Information Security, ISO 2700x

- Corporate Information Security Management (analyzing/applying information security, risk mgt, privacy practices etc)

- Setting up and running a Security Operations Center

- Information Security and Data Projection frameworks/guidelines

- International Standards Organization (ISO) 2700x

- IT Infrastructure Library (ITIL)

- Control Objectives for Information and Related Technology (COBIT) frameworks

- Communication and Interpersonal skills

Key Deliverables :

Job Purpose :

- The Information Security / Cyber Security Lead for Wellness Forever plays an integral part in the development, implementation, and compliance of technology security across the enterprise.

- The Lead is responsible for managing risks related to information security, data and information related to physical security, business continuity planning, crisis management, privacy, and compliance.

- In addition, the Lead ensures all staff members are trained on enterprise and statutory security requirements through awareness programs.

Key Responsibilities and Duties :

- Develop and implement security standards, processes and procedures, and guidelines for the enterprise

- Ensure and monitor information security compliance with industry and government rules and regulations

- Coordinate with technology and business groups to assess, implement, and monitor IT-related security risks/hazards

- Understand the trade-offs required to manage the different levels of risk tolerance and risk exposure across the organization and balance this with risk investments

- Track insights around security performance against established security metrics

- Ensure security complies and meets all service level agreement requirements

- Create an information security awareness program to ensure staff members across the organization understand the trade-off between risk and return

- Understands - voice of the customer- and develops mechanisms to proactively sense adoption and usage patterns of consumer technologies by end-users so that policy can align with the need

- Continuously help to upgrade and proactively ready the organization for Information Security and enable timely prevention, detection, prediction and correction as Information Security risk scenarios

Qualifications & Experience :

- A bachelor's degree in information systems or equivalent work experience

- 8-10 years of relevant work experience

- Professional experience in running the information security office analyzing and applying information security, risk management, and privacy practices

- Experience in setting up / running a SOC (Security Operations Center)

- Knowledge of national regulatory compliance and frameworks on security and Data protection guidelines etc

- Experience with common information security management frameworks, such as the International Standards Organization (ISO) 2700x, the IT Infrastructure Library (ITIL) and Control Objectives for Information and Related Technology (COBIT) frameworks

Soft Skills :

- Excellent verbal and written communication skills

- Ability to react to high-pressure dynamic changing environments

- Ability to train security concepts to all areas of the business

- Strong problem solving and analytical skills