JOB SUMMARY - This position will be accountable for creating and driving strategy and related initiatives to address technology related risks and compliance mandates. This position will need to partner with the IT operations, especially the cybersecurity team in addition to the solutions team, for driving necessary initiatives for the organization. - This role will provide a broad vision, clarity, and understanding about the complexities of protecting the organization against the growing areas of cyber security threats. - The position will also be responsible for driving compliance to set IT processes including necessary documentation and measurement of adherence/ success across all domains of IT. - This role will also ensure secured access to information assets that is critical for business operations. The position will ensure that information assets and associated technology, applications, systems, infrastructure and processes are adequately protected in the digital ecosystem from criminal or unauthorized use of networks, computers, programs and data from attack, damage or unauthorized access. The position should understand and articulate the impact of technology risk on (digital) business and be able to communicate this to the stakeholders. - The position will responsible for identifying, evaluating, reporting and addressing legal and regulatory risk related to information assets, while supporting and advancing business objectives. - The position requires sound knowledge of ISO27001 Standard, Cybersecurity practices and technologies covering the corporate network as well as the broader digital ecosystem. The position will be responsible for implementing and running the enterprise information security program and manage required compliances (India & International) and privacy related aspects. - He or she serves as the process owner of the appropriate second-line assurance activities not only related to confidentiality, integrity and availability, but also to the safety, privacy and recovery of information owned or processed by the business in compliance with regulatory requirements. A key element of the position's role is to determine and recommend acceptable levels of information risk for the organization for risk acceptance by the organization. - The position has the primary responsibility to drive appropriate initiatives that improves compliance from statutory perspective and lead audits through success. KEY RESPONSIBILITIES Technology Risk Management- 60% - Develop, implement and monitor technology and information risk vision and strategy that is aligned to organizational priorities and enables and facilitates the organization's business objectives, and ensure senior stakeholder buy-in and mandate. - Develop, implement and monitor a risk based comprehensive information security program to ensure appropriate levels of confidentiality, integrity, availability, safety, privacy and recovery of information and information assets owned, controlled or/and processed by the organization. - Work closely with IT teams to protect solutions designed/developed/ implemented from technology and information risks based on risk acceptance of the organization. Integrate risk assessment as integral part of project management practice. - Responsible for overall InfoSec risk management (risk identification, treatment and bringing risks to acceptable levels). Work effectively with business to facilitate information security risk assessment and risk management processes and assist them to own and mitigate the risks. Keeping risk registers updated with changing risk landscape, dynamic business requirements and demanding regulatory/ statuary requirements. - Define, Monitor, Report and Improve Risk KPIs to all relevant stakeholders. - Develop and enhance an up-to-date Cybersecurity framework inline to Global Cyber Security Team's requirements, ISO27001 standards and industry best practices. - Develop and maintain a continuously up-to-date information security policies, standards and guidelines. - Develop, implement and review security guidelines for vendor contracts who provide products or services. - Conduct InfoSec risk assessment for critical vendors and address all non-acceptable risks. - Work with CIO, PR Infosec committee, CTO and CISO to drive technology risk mitigation strategies in line with agreed plans and objectives. - Drive technology security maturity assessment & improvement covering assessment of tools, technologies, people, processes and governance of risk and compliance. Drive improving maturity through assessment of technology and processes implemented for Cloud, SOC, Data Center, Incident Management, data discovery, classification and protection (e.g. encryption, access controls, storage, archival and secure disposal). - Lead and train the - security champion program- for PRI to drive awareness across all locations. - Drive quality and performance management measures to address any risks on solutions/ infrastructure that is implemented for business. - Collaborate with the data officer to ensure that data privacy requirements are included where applicable. - Develop and implement an effective disaster recovery policies and processes that is aligned with the enterprise business continuity management (BCM) program goals. IT Governance - 20% - Assist, participate and coordinate in internal/group/external audits and assessments - Monitor, measure and report process compliance against group guidelines. - Assist in budget and forecast data gathering and analysis. - Assist and coordinate IT group conferences / events Stakeholder management - 20% - Maintain a deep understanding of key stakeholders and associated planning for stakeholder management - Serve as a liaison for Technology Risks and Controls - Lead as an - agent of change- in partnership with IT operations and IT solutions team to drive initiatives and projects to logical conclusion - Provide leadership on technology risk and controls domain to ensure alignment with group and affiliate standards, both internal and external Requirements and Qualifications - Minimum of 10 years of experience in a combination of information / technology risk analysis, information security, IT and Industrial Automation / Operational Technologies (OT) roles. Up-to-date knowledge of methodologies and trends in business and IT. Prefer experience in related industry with a manufacturing setup. - Degree in a technology-related field, or equivalent work- or education-related experience. - Professional security management certification is desirable, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials. - Sound knowledge of information security risk management, cybersecurity, new technologies like blockchain, IOT and so on. - Sound knowledge of information security management frameworks, such as NIST, ISO/IEC 27001, ITIL, COBIT. - Excellent written and verbal communication skills, proactive, interpersonal and collaborative skills, and the ability to communicate information security and risk-related concepts to technical and nontechnical audiences at various hierarchical levels, ranging from board members to technical specialists. - Proven track record and experience in developing information security policies and procedures, as well as successfully executing programs that meet the objectives of excellence in a dynamic business environment. - Poise and ability to act calmly and competently in high-pressure, high-stress situations. Must be a critical thinker, with strong problem-solving skills. - Excellent analytical skills, the ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives. - Ability to influence different parts of organization to achieve tactical and strategic goals on technology risk. - Experience with contract and vendor negotiations. Excellent stakeholder management skills. - High level of personal integrity, as well as the ability to professionally handle confidential matters and show an appropriate level of judgment and maturity. Skills required: - Contextual/technical skills (from 1 to 4) - IT Strategy & Planning 2 - IT Governance & Compliance 3 - Innovation & new tech. 1 - IT Solutions Delivery 2 - IT Support Services 1 - IT Technical (InfoSecurity) Expertise 3 - Vendor Management 2 - Project Management 2 - Change Management 3 - Business Acumen 2 - Relationship Building 3 - Leadership profile (from de 1 to 4) - Strategic vision 2 - Entrepreneurship 2 - Results Orientation 3 - Live the Values 3 - People Development 1 - Team Management 2

Gurgaon/Gurugram

Manager - Technology Security & Governance - IT 

Manager - Technology Security & Governance - IT  ,Job Description for Manager - Technology Security & Governance - IT  in Path Mentors Staffing Solutions in  Gurgaon/Gurugram for (10-20) years of experience. Apply Now!

Job Description for Manager - Technology Security & Governance - IT  in Path Mentors Staffing Solutions in  Gurgaon/Gurugram for (10-20) years of experience. Apply Now!