Manager - Information Security/Governance - IT

- Overall 6-12 years working in IT services/consulting industry with 5-9 years exp. in rollout and sustenance of IS Policy, Risk Management, Security Frameworks, ITIL/ITSM processes at Enterprise level with around 10000 users.

- Minimum Engineering graduate.

- CISA, CISM, CRISC - Any one of these

- ISO27001 Implementor - Must

- ISO27001 LA / ISO22301 / ISO31000 - Preferred

- Hands on work experience in rolling out ISO27001, IS Policies, Risk Management & Security Frameworks,

- Expert in Mapping of IS Controls to the IT Processes.

- Capable of independent preparation of blue print and identification of gaps for rollout of IS Policy

- Highly skilled in converting IT general controls requirements into business requirements / technical requirements and driving it.

- Developed service reports using BI tools the KPIs agreed with business/clients

- End User Security Awareness Programs and Campaigns using various media.

- Practical experience of rollout of security tools and controls on Infrastructure tools (i.e. Active Directory, O365Mail, Alert and Systems Management)

- Worked on Projects as Project Manager in line with PMP principles.

- Excellent written and presentation communications skills

- Experience creating data-driven IT support metrics and trending analysis.

- Positive - can do- attitude and alignment to a concept of "Team" Strong customer service and written and verbal communication skills.

KPIs for the IS Governance Manager:

- Establishing governance processes, architecture and standards for IS / IT services

- Maintain IS Policy and Security / Risk Frameworks and ensure and report compliance to the same.

- Maintaining service communication with business stakeholders

- Information Security Awareness for end users

- IS Policy/ Controls reporting and dashboards

- Project Management processes should be followed uniformly and progress reported.