- Perform scanning and risk analysis for potential security issues
- Perform risk analysis and remediation recommendations in IT related operations including network operations, systems engineering, change management, and general IT administration oversight
- Assist CISO in Designing, administering and maintaining various technical security tools
- Identify issues that could impact the organization and escalate any serious issues/ breaches/ violations
- Develop/monitor action plans for its closure in liaison with business groups.
- Provide guidance to operations management team for effective and efficient surveillance and monitoring towards pro-active security and business process non-compliance issue identification
- Responsible for designing the security architecture
- Contribute to the recommendations of corporate solutions to resolve security issues.
- Provide mechanisms to monitor all critical services and implementing a measurable Key Risk Indicators (KRIs) & manages the security planning, assessment, risk analysis, risk management, and awareness activities for systems and networking operations.
- Oversee the information security operations and penetration testing
- Conduct Assurance activities on the implemented security controls and identify and propose corrective action
- Interact with technology team to define and achieve required security objectives for the organization.
Requirements
- Bachelor's degree of Engineering or Computer Science is a must
- 12+ years of relevant experience in information security risk management and assessments/audits.
- CISM, CRISC, CISSP, SANS SEC401, CBE, PCI is a plus.