Information/Network Security Role - CISO

- Lead and set up information security practice for the organization

- Process design - define internal compliance process to meet client requirements. The expectation is zero gaps/defects. The current framework includes Assets Governance, Software Governance, Network Security, Systems (end-point) Security and BC/DR

- Process execution - For certain areas such as client supplied assets and BC / DR, the candidate shall be directly responsible for running the compliance process through a team reporting to him / her

- Process monitoring - For all controls pertaining to Information Security, the candidate shall be responsible for monitoring metrics, highlighting and helping remediate gaps / non-compliances

- Coordination & collaboration - The candidate shall work with internal stakeholders such as Systems Admin (IT) and Delivery (Project Managers, Account Managers etc) to drive compliance on a day-to-day basis

- Client Front-ending - The candidate shall front-face with the customer from time to time and shall represent in client forums on Information Security

- Audit Readiness - The candidate shall be responsible for facing client-driven external audits (typically done by a Big-4 audit firm over a period of 2-3 months every year)

- Team management - The candidate shall be in charge of a team who would assist in the above areas

Requirements:

- 12-15 years of experience in Information security, including: Assets Governance, Software Governance, Network Security, Systems (end-point) Security, BC/DR, SIEM, DLP

- Hands-on experience in implementing Information Security frameworks such as ISO 27001, COBIT etc.

- Familiarity with technical standards on security such as NIST, CIS etc.

- Should have exposure to tools used in Information Security space

- Should ideally hold Information security implementation experience in large scale Indian / MNC organizations

- Exposure to audit management would be a plus