Sr Manager - Information Security - Bank

Company: Bank

Role: Information Security Officer

Location: Kolkata

Role Description:

To assist the Chief Information Security Officer (CISO) in all his areas of responsibility as under:

- To devise and implement information security policies and procedures of the Bank to protect the organization from internal and external attacks

- Working closely with the IT Head for discussing security issues relating to people, process and technology in all IT areas and resolving them

- Help design and implement short-term and long-term strategic plans in collaboration with the Head of IT to ensure IT Security implementation in the Bank meets existing and future requirements

- Create a security assessment phase in the bank's IT Project Management - process flow so that information security is never given a go-by.

- Continuous interactions with IT Department to ensure Business Continuity and ensure periodic DR and BCP drills

- Negotiate with vendors, outsourcers, and contractors for IT Security-specific products and services

- Special review of security status of Data Centre

- Devise Security Metrics for objective measurement of security implementation

- Planning and deployment of Information security measures across the Bank

Required Skills:

- Possess a minimum of 10 years of total experience in handling Information Security either exclusively or being a part of Information Technology Department.

- Preferably CISA / CISM / CRISC / CISSP qualified

- Must be abreast of the global Information security threat scenario

- Strong knowledge and skills in application, database, infrastructure, networking and internet for evaluating vulnerabilities and understanding their repercussions.

- Knowledge of information security requirements in Internet Banking, Mobile Banking and ATMs

- Knowledge of Application Security and especially OWASP

- Knowledge of internal threats including data leakage issues, DFA etc.

- Knowledge of IT Act 2000 with its amendments and related publications

- Knowledge of regulatory guidelines relating to information security