Leader - Information Security - IT

Information Security Leader

About the Role :

The Information Security team is looking for senior InfoSec practitioners and security technology leader to secure fortune 500 enterprise. You will lead the client security engagement and executing the Information Security projects and developing security products.

What you'll do :

- Lead the design, implementation, operation and maintenance of the Information Security Projects and Clients engagements

- Lead implementation of the information security plans and manages the operational processes for monitoring and maintaining information security.

- Maintain complete awareness of current and developing information security regulations, technology, and threats.

- Ability to define and comprehensive set of policies, procedures, and security plans to maintain appropriate security for the various types and categories of unclassified and classified information assets.

- Perform Security Assessments for critical products and applications based on NIST 800-53 and ISO 27001.

- Complete and deliver regular information security reports and assessments as are required by regulatory agencies and our customers.

- Promote awareness of security issues among developers, architects and management and able to deliver Information security training.

- Able to communicate and provide data driven information Security Risk and security risk mitigations plan

What you'll bring :

- 18+ years of Information Security experience in Security Architecture, SSDLC, Pen testing, Cloud & Network Security.

- 10+ years of demonstrated experience in the field of Information Security

- Bachelor's degree in Computer Science, Engineering, or Mathematics

- Self-starter and capable to lead Information Security projects, make a business case and capable to execute the Information security projects.

- Relevant security qualifications e.g. CISSP, CEH, GIAC, CISM

- Relevant experience managing security for companies that leverage cloud technologies such as Amazon Web Services (AWS) and / or offer platform as a service (PaaS) with security commitments to customers and partners.

- Relevant experience and understanding of regulatory frameworks such as SOC 2, GDPR, PCI, etc. is highly desired.

- Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate security and risk-related concepts to technical and non-technical audiences.