Title : Information Security Specialist - Outsourcing Arrangements  Function : Information Security and Operations  Location : Mumbai  Job Grade : Band 6  Overview :  - Bank has engaged external third party entities for various services. Confidential information are often handled by these third party entities. But, it is the Bank's responsibility to ensure that this information is protected. It is very critical to identify and mitigate information security risks to the Bank in the third party environment during procurement and on an ongoing basis via periodic information security assessments.  - Information Security is a critical function within Standard Chartered Bank. It is our mission to protect the Bank from information security threats by delivering effective information security services, responding to security incidents and educating staff.   - The team is instrumental in ensuring that the Bank soundly meets its commitments to internal and external stakeholders, and maintains an appropriate information security defence posture.  - Bank's success depends on the Information Security function to maintain the correct balance of security capabilities and risk management across all businesses and functions.  Key Roles & Responsibilities :  - Provide necessary guidance and support to Third Party service providers on Information Security standards/policies/procedures.  - Assist in Assessment of Information Security compliance of Third Party service providers.  - Ongoing monitoring Information Security compliance of Third Party service providers.  - Assist in Assessment of Data Leakage vulnerabilities and suggest & implement controls for Protection.  - Develop and produce monthly MIS reports with progress of Third Party service provider compliance.  - Perform sample assurance checks on Third party service provider compliance.  - Engage with Group Information Security (GIS) team for timely completion of Third Party Security Assessment.  - Manage a register of third party security risks and ensure that deficiencies are mitigated.  - Assist in the documentation of policies, internal controls, procedures and guidelines for Third Party service providers.  - Organize and Manage training and awareness initiatives relating to third party security risk.  - Keep abreast of the Group Information Security Standards & Procedures.  - Keep updated with Cyber Security Framework Requirements.  - Keep updated with Industry Standards & Developments on Information Security.  - Initiate, lead and coordinate actions to strengthen and monitor country level information security and cyber security controls.  - Undertake country level information security review in businesses and functions to ensure compliance with internal policies and external regulations.  - Respond to and investigate country level information security incidents and breaches in order to reduce/contain potential damage.  - Provide Country Information Security Reports to SCB Country CIOs and local Regulators.  - Function as a formal contact point on Information Security matters and requirements which could be bespoke to the location.  - Ensure that group wide information security initiatives are successfully implemented in the local context. Support country with standardization of processes and tools for the local countries project implementation.  - Assist in engagement of GIS on any new and amended requirements from the local Regulators. Assist in ensuring that local Regulatory requirements are met.  - Engage GIS on any Internal and External Audits, involving Information Security. Work with GIS and Tech Governance to manage the information flow and responses to the audit reviews.  - Inform GIS on all information security incidents that affect the local financial industry or SCB. Work with GIS to manage the risk related to the new incident if required.  - Assist in ensuring effective management of local Information Security Operations.  - Perform risk review activities as directed by GIS and CIO.  Qualifications & Skills :  - Bachelor's degree from an accredited college/university in an appropriate field.  - Preferably a Certified Information Security Auditor.  - Minimum 5 years experience in technology or information security, preferably in Banking and Financial services sector.  - Good level of understanding of operations and technology.  - Results driven with strategic qualities  - High degree of responsibility and integrity  - Excellent communication capability  - Attention to detail, and the ability to multi-task in a fast paced dynamic environment.  - Background in information security, data privacy, or risk and compliance is a plus.  - Knowledge of security frameworks (e.g. COBIT, ISF, COSO), standards (e.g. ISO, NIST, CIS), information security principles and security architecture will be a plus.  - Ability to work within a country and global multi-function, multi-discipline team environment with strong influencing and stakeholder management skills.

Mumbai

Standard Chartered Bank - Information Security Specialist - Outsourcing Arrangement 

Standard Chartered Bank - Information Security Specialist - Outsourcing Arrangement  ,Job Description for Standard Chartered Bank - Information Security Specialist - Outsourcing Arrangement  in Standarad Chartered Bank in  Mumbai for (5-10) years of experience. Apply Now!

Job Description for Standard Chartered Bank - Information Security Specialist - Outsourcing Arrangement  in Standarad Chartered Bank in  Mumbai for (5-10) years of experience. Apply Now!