Asstt. Manager - Cyber Security and IT Governance @ Noida Our client is a large industrial house in Oil & Gas domain and they would like to fill-up following position asap. Candidate should ideally be from Oil & Gas domain. Position : Asstt. Manager - Cyber Security and IT Governance Location : Noida Education : BE/ B.Tech Experience : 6 - 8 Years Compensation : Commensurate with education and experience Role Responsibilities and Desired Profile : JOB PURPOSE: This position reports to Head-Cyber Security & Quality and the person shall work in cyber security & quality team for development and implementation of the information security risk management program, including popular standards and frameworks. Responsibilities include effective system-wide security & quality governance, compliances; risk assessment; awareness and education; and development of policies, standards, an guidelines across organization. DUTIES AND RESPONSIBILITIES: 1. Works on Governance, Risk, and Compliance framework tailored to the Oil & Gas/process industry, ensuring alignment with business objectives. 2. Implements processes, such as GRC (governance, risk and compliance), to automate and continuously monitor information security controls, exceptions, risks. Develops reporting metrics, dashboards, and evidence artifacts. 3. Defines and Implements security controls, risk assessment framework, and program that align to regulatory requirements, ensuring documented and sustainable compliance that aligns and advances company's business objectives. 4. Evaluates risks and develops security standards, procedures, and controls to manage risks. Improves organization's security positioning through process improvement, policy, automation, and the continuous evolution of capabilities. 5. Lead risk assessments, identify vulnerabilities, and develop strategies to mitigate potential threats to our information assets and operational technology (OT) systems. 6. Updates security controls and provides support to all stakeholders on security controls covering internal assessments, regulations, protecting Personally Identifying Information (PII) data. 7. Performs and investigates internal and external information security risk and exceptions assessments. Assess incidents, vulnerability management, scans, patching status, secure baselines, penetration test result, phishing, and social engineering tests and attacks. 8. Documents and reports control failures and gaps to stakeholders. Provides remediation guidance and prepares management reports to track remediation activities. 9. Remains current on best practices and technological advancements and acts as the key resource for security assessment and regulatory compliance. 10. Establish standard practices to maintain a balanced security and compliance control framework that meets necessary regulatory and contractual requirements. 11. Ensure that necessary security due diligence of our vendor portfolio is maintained. 12. Create, review and update required policies, standards, and controls to drive efficient compliance controls. 13. Develop, review, and update information security policies, procedures, and guidelines to reflect the evolving threat landscape and regulatory changes. 14. Facilitate the processes necessary to ensure that we have effective business continuity to overcome physical, operational, or technology disruptions. 15. Carry out Business Impact Analysis and document business continuity plans with sign-off from technology and business stake holders 16. Plan and facilitate testing of our business continuity, incident response, and disaster recovery plans with appropriate business and technology stakeholders. 17. Implement, manage and maintain compliance with industry standards, including ITIL, ISO 20000, ISO 27001, ISO 22301, NIST CSF, NIST RMF and relevant regulatory requirements. 18. Ensure the security and resilience of operational technology systems, aligning with industry best practices and standards. 19. Promote a culture of security awareness and provide training and education to employees and stakeholders. Contribute to regular weekly cyber awareness mailers, postures for all employees. 20. Coordination in SOC activities and Collaborate with incident response teams to develop and test incident response plans, ensuring a rapid and effective response to security incidents. 21. Generate reports and create dashboards on security and compliance metrics on a regular basis as needed. QUALIFICATIONS & EXPERIENCE : Qualifications : - The candidate must be a graduate engineer in Engineering, computer science, Information Security, or a related field. - Relevant information security and governance certifications (e.g., CISSP, CISM, CRISC, CISA, CCSK, ISO 27001/22301/20000 LA, ITIL etc.) preferred. Experience: - The candidate should have at least 6 years of experience in information security, with focus on Risk management, IT Governance, Quality, audits, and compliance. - Experience with Information Security domains - in particular one or more of the following: Cyber Risk Management, Infrastructure Security, cloud Security, Security Operations, Cyber Threat Exposure Management, Identity & Access Management, Cyber Resilience and Breach Support. This experience should include both advisory and implementation experience. - Experience with ITIL and ITSM standards, implementation, process audits and improvement planning - Experience in assessing and/or implementing security and risk standards including ISMS, BCMS, NIST CSF, NIST RMF, ISO 27001, ISO 22301, ISO 20000, COBIT, ISA/IEC 62443. - Experience in performing risk assessment of IT applications, Infrastructure, OT systems, business processes, writing risk assessment reports, maintaining risk register and driving the risk management cycle. - Security assessment and clearances as required for the new and existing applications/ programs. - Experience performing information security audits or risk assessments - In-depth knowledge of ISO standards ( ISO 27001, ISO 22301, ISO 20000 ), NIST Cybersecurity Framework, and industry-specific regulations. - Understanding of operational technology (OT) security principles and best practices. - Excellent communication skills, with the ability to collaborate effectively across departments and levels of the organization.

Noida

Assistant Manager - Cyber Security & IT Governance 

Job Description for Assistant Manager - Cyber Security & IT Governance  in PKS & Associates in  Noida for (6-8) years of experience. Apply Now!