Wipro - AM/Manager - Information Security Audit

Job Description:

1.Technical/Application Vulnerability assessments (servers,desktops, network & security devices) and Knowledge in web application security testing/Mobile applications

2. To conduct technical Vulnerability assessments for Web servers,DB servers, Network devices Etc. using Nessus/ McAfee vulnerability Manager /AppScan /Acunetix Tools.

3. Develop hardening guidelines and helps in Improving and maintaining baseline standards.

4.Supporting the incident response and architecture review processes whenever application/technical security expertise is needed.

5. To publish VA reports using defined templates and also publish management PPT for audits /VA conducted.

6.To provide metrics reporting the state of technical /application security /VA assessments.

7.Exposure to industry standards such as ISO 27001, PCI-DSS, with Audit experience in large enterprise/Service provider environment

8. Experience in administering network and security technology including Cisco Switches, Firewall, IDS/IPS, Proxy Servers, DNS etc-

9. Complete understanding about life cycle of Information Security Audit / VA

Candidate skill set requirement

1. 5 to 15 years of experience in information security focused on infrastructure /Application security.

2. Good understanding of Security /Networking technologies and concepts

3. Good Exposure to Microsoft platform and other operating system security fundamentals

4. Exposure to next generation computing platforms like virtualization, cloud computing and Mobile security

5. Hands on experience in security devices like firewalls, IPS,Advanced malware protection devices, Identity services

6. Experience on End point security solutions like antivirus,HIPS

7. Should have good MS office (Excel and Word) skills.

Good to Have:

CISSP/CISM,CEH, CCIE/CCNA/CCNP (security) (CCIE Optional),other security technology certification's an additional advantage