Manager - Information Security - ISO 27001

Role & RESPONSIBILTY:

- Candidate should have key understanding on technology, IT and governance aspects from Cyber Security perspective

- Candidate should have understanding on performing gap assessment on organizations Cyber security landscape primarily to prevent them from cyber security threats

- Candidate should have exposure to design, development, implementation and maintenance information security framework aligned to framework like ISO 27001:2013

- Candidate should have managed end-to-end Information security, cyber security for its organizations

- Experience in performing the risk assessment from Cyber Security, Business Continuity and Privacy perspective

- Experience on Data Privacy including design/ development and review of privacy framework aligned with GDPR requirements and GAPP framework

- Experience on design/ assessment/ review of information security and privacy framework aligned to IT Act requirements

- Cyber Incident Response

- Regulatory compliance assistance in Cyber for some of the key sectors including Telecom, BFSI, Oil and Gas, IT/ ITeS, Retail and others

- Development and documentation of information security / cyber security policies and procedures

- Exposure to international standards like NIST, CIS 20, ISO27001, ISO 22301, ISO 20000, PCI-DSS, certifications like CISA, CISSP, CIPP, CIPM

- Aligned organization strategy to cyber strategy

- Developing cyber strategy roadmap, helping in implementation

- Performing maturity assessment for cyber setup

- Recommending roadmap for strengthening the organizations cyber security posture

- Ability to perform independent assessment for third parties and provide recommendations to clients in order to minimize cyber security risks

- Strengthening of organizations business continuity posture

- Candidate should have experience in working in teams and managing internal and external stakeholders