Information Security Manager - Insurance & Broking Firm

We are actively looking to hire an Information Security Manager for one of the leading Insurance and Broking firm based out in Mumbai.

Here are the pre requisites of the role.

- 9+ yrs

- Should have done ISO27001 Implementations

- Should have excellent knowledge of SDLC

- Working knowledge of Application Security Support.

- Working knowledge Network Information Security.

Manager - Information Security under Risk and Compliance is a key member of the India Risk team and would be responsible for ensuring the data protection and information security requirement. The incumbent will also be responsible for ensuring compliance for Legal and Statutory compliance.

- Data protection/GDPR and Information security standards specified by the various regulators

- Develop and enhance an information security management framework based on one or more of the following ISO 27001, ISO 20000 / ITIL, National Institute of Standards and Technology (NIST), DPA, GDPR

- Comprehensive evaluation and establishment of Security control assessment including network vulnerability and Cyber security.

- Facilitate information security governance through the implementation of a hierarchical governance program, including the formation of an information security steering committee or advisory board

- Develop, maintain and publish up-to-date information security policies, standards and guidelines.

- Provide strategic risk guidance for IT projects, including the evaluation and recommendation of technical controls

- Coordinating the information security compliance efforts of all internal and outsourced functions that have one or more information security-related responsibilities, to ensure that organization-wide information security compliance efforts are consistent.

- Evaluating information security exception requests based on valid business

- Roll out of information security risk assessment program which includes Vulnerability Assessment, Penetration testing, Network & Security Architecture, Application Security reviews, Endpoint security,

- Knowledge and understanding of relevant legal and regulatory requirements, eg: IT ACT, Cyber Security Policy 2013, GDPR, DPA

Interested applicants can apply and share their updated profile at below email ID.

Elements HR Services