Job description - Manager Cyber Security Governance  1. Job posting for: Infosys Ltd.  2. Unit: Information Security Group (ISG)  3. Group: Cyber Security Governance (CSG)  4. Designation: Manager - Cyber Security Governance (JL5) as applicable  5. Reports to: Head Cyber Security Governance Infosys Ltd.  6. Team size: up to 10 members  7. Base location: Bangalore  8. Team members located at: Across locations but most staff based in Bangalore  9. Introduction :  - ISG is a large Security group focused on internal Security of Infosys and in turn providing the required assurance to Clients on meeting their Security demands as per contractual agreements. The team is dispersed across locations and is divided into 3 Groups consisting of 10 Functions.  - The CISO heads ISG and the 3 Group Heads report to him, wherein the Function Heads report to their respective Group Head.  - ISG makes use of many state-of-the-art Cyber Security best practices and products to help proactively detect and respond to various Strategic, Tactical and Operational threats arising from time to time.  The 3 Groups are :   1. Cyber Security Governance (CSG)  2. Cyber Security Policy Risk and Compliance (PRC) and,  3. Cyber Security Technical Operations (TechOps)  This Job Description focuses on Cyber Security Governance (CSG) Group Manager.  10. Responsibilities:  10.1 Work closely with the Head of Cyber Security Governance as the Manager of Cyber Security Governance to champion organization wide Cyber Security Governance initiatives in line with the Cyber Security Strategy to ensure the CISO's agenda is achieved as a whole  10.2 Responsible for effective Cyber Security Governance & Roadmap across Infosys group of companies ( Infosys or - Organization or Company ) & it's Subsidiaries  10.3 Liaison with all internal (ISG) and external (non-ISG) Lead Managers to meet Cyber Security Governance objectives including Subsidiary point of contacts  10.4 Institutionalize a robust Cyber Security Governance Framework which includes a best-in-class Cyber Security Strategy and its associated roadmap towards achieving its objectives  10.5 Manage the Cyber Security Strategy to leverage new technology and threat vectors  10.6 Manage a Program Management Office (PgMO) to ensure all critical Cyber Security Programs and Projects are tracked closely and progress reported on a periodic basis  10.7 Institutionalize and maintain a comprehensive Cyber Security Metrics Program in line with industry best practices such as, ISO 27004 or Information Security Forum (ISF) with on-demand as well as periodic reporting to, Head - Information Security Governance  - Security councils such as Information Security Council (ISC), Subsidiary Security Councils and, Board members  - Advise the Lead managers and relevant stakeholders on pertinent Cyber Security Risks identified from the Information Security Metrics program  - Manage the various Cyber Security Council's Governance Frameworks and Terms of References (ToR)  - Manage the Cyber Security RACI in consultation with relevant stakeholders for effective Cyber Security Governance in the organization  - Disbursal of minutes of meetings (MoM) of various meetings with CISO & Head of Cyber Security Governance involvement and track action items closely and progress is reported on periodic basis  - Liaison with Senior Management, including C-level executives and Board members as and when situation demands  - If required, be able to interface with the Client counterparts and their Leadership to provide the right assurance with regards to Infosys- Information Security Practices safeguarding their data  - Ensure multi-faceted, business-focused Security strategies are implemented which would bridge the gap between technical and business functions while ensuring Security at the same time  - As the owner of the IT GRC system, liaison with various module owners to drive appropriate decisions which will bring in important improvements on how the system is used individually at a module level and as a GRC system as a whole in a most optimal manner  - Keep self completely up-to-date with the activities of other ISG Functions / Groups so as to be able to glean on the issues and whether it is in line with the Cyber Security Strategy and thus the Head of Cyber Security Governance agenda  Skills and knowledge expectations :  Possess cross-domain knowledge in various areas of Cyber Security such as, but not limited to,  - Information Security Forum (ISF) Standards of Good Practice (SoGP)  - Information Security Management System (ISMS) based on ISO 27001 and ISO 27002 standards and very strong skills in writing and disbursing of Cyber Security Policies, Processes, Procedures, Standards and Guidelines  - Information Security measurement and monitoring based on ISO 27004 wherein strong skills in Microsoft Office suit products are heavily utilized  - Information Security Audits  - NIST Cyber Security Framework (CSF)  - Cyber Security Strategy  - Cyber Security Maturity Models  - Adept in Information Security Risk Management with good experience on various Risk Management practices in either of the following,  - ISO 27005 Information Security Risk Management Standard  - ISO 31000 Risk Management Standard  - NIST and ISF Risk Management best practices  - A good understanding or working knowledge of,  - Vulnerability assessments and penetration testing  - Application security source code reviews  - Incident management and investigations life cycle  - Security Architecture design principles and its applications in real-world scenarios  - Working knowledge of various other Best Practices, Standards, Regulatory and Statutory frameworks such as, but not limited to, SSAE-16 / 18, PCI DSS, HIPAA, GLBA, SoX, SANS Critical Security Controls (CSC), Privacy in general but General Data Protection Regulation (GDPR) in particular  - Stay abreast with the fast changing world of Information Technology and Cyber Security; and liaison with leading Industry bodies / forums and CxO community to share and learn ideas, and adopt best practices where possible  - ISO 27001 Lead Auditor (LA) or Lead Implementer (LI) Certification Desirable  - CISSP certification Mandatory Desirable  Others:  12.1 Self-starter, positive mentality and a go getter attitude mandatory  12.2 Strong verbal and written communications skills mandatory, including creative writing skills  12.3 Strong people and negotiation skills mandatory  12.4 Quick learner, a researching mentality and ability to adapt to and meet demands of a fast changing environment  13. Additional notes:  13.1 The Head of Cyber Security Governance reports to the CISO  13.2 Travel across different Infosys locations  13.3 As and when opportunities arise, travel to attend conferences and industry body work groups

Bangalore

Infosys - Manager - Cyber Security Governance 

Infosys - Manager - Cyber Security Governance  ,Job Description for Infosys - Manager - Cyber Security Governance  in Infosys in  Bangalore for (5-10) years of experience. Apply Now!

Job Description for Infosys - Manager - Cyber Security Governance  in Infosys in  Bangalore for (5-10) years of experience. Apply Now!