Advisory Role - Information Security - Consulting Firm

- Competent with Application Security, information management, infrastructure security, Cloud Security principles as well as data protection related regulations such as GDPR

- Working knowledge of frameworks and standards including ISO 27001, ISO 27002, PCI DSS, SOX, HIPAA

- TOGAF/CISSP/CISA/CISM certified preferred

- Security Strategy: Can review overarching security vision, existing security programs as well as can conduct analysis of present and anticipated threats and define new programs to plug in identified gaps

- Security Operating Model: Should be competent with creation of cost effective and efficient security operating model for solid security posture. Should be able to deep dive into people, process and technology aspects of Security Operating Model.

- Security Architecture: Experience in developing security guiding principles as well as logical security architecture for Applications, Data and Infrastructure EA layers. Must be proficient in deep diving into multiple layers for detailed security design

- Security Governance: Has setup up Enterprise Security Governance organization in large enterprises and helped structure program, define roles and responsibilities and help in establishing decision making, RACI, risk management & escalation matrix framework

- New IT: Proficient with New IT technologies such as Cloud, Blockchain, AI, RPA, IoT and their implications on security.