Manager - Operational Risk & Compliance - Information Security Process

Salary offered: 10 - 30 LPA

Position Title: Manager - Operational Risk & Compliance

Process: Information Security

MAIN PURPOSE OF THE ROLE:

Role Brief -

To manage and drive Information Security and Business Continuity Management for some of the India Business Services site in line with the Global Information Security Management System and Business Continuity Management System. He will also be responsible for managing a team, currently three FTEs. He will be responsible for a defined scope of the management system, India Centre or specialty like Cyber Security / Forensic within Risk and Compliance, working at the direction of the Head of Risk and Compliance - Asia-Pacific.

Key Responsibilities -

Establish, implement and maintain an effective Integrated Management System(IMS) covering ISMS & BCMS for India Delivery Centre

a. Developing and maintaining the IMS

b. Hands on experience in Risk, Incident and Business continuity management

c. Hands on experience on Cyber Security and Forensics

d. Hands on experience on GRC tools

e. Developing and promoting security awareness/ Business continuity awareness

f. Good Auditing skill set on ISO 27001/22301 standard

g. Ensure effective delivery of IMS

h. Maintain IMS process and conduct assurance

i. Good knowledge in developing or fine-tuning IMS standards

2. Good technical documentation skills

3. Ensure compliance to the relevant ISO Standards

4. Demonstrated People leadership and management expertise

5. Maintain Stakeholder relationship

Essential Skills and Experience -

- 8 to 15 years of Experience, out of which 8 to 10 years of experience in Information Security and Business Continuity Management.

- Mandatory ISO 27001/22301 LA

- Certified in CISM / CISSP/ CISA / CRISC / CBCP / CEH / CCFP / CFCE

- Optional PMP

- Strong background in Information Security & Business Continuity Management Systems.

- Able to demonstrate strong problem solving, communication, people management skills.

Desirable Skills and Experience

- Certified Lead Auditor or Lead Implementer for ISO 27001 and ISO 22301

MEASURES OF SUCCESS: (For 07 and above only)

- Certified in CISSP/ CISA / CISM/ CBCP / CRISC / CEH / CCFP / CFCE /ISO 27001/22301 LA

- (CISA and CISM) are mandatory.