Project Manager/Assistant Vice President - Information Security

DEPARTMENT : Information Technology

LOCATION : Mumbai

BAND : 3A

TRAVEL : Moderate

SHIFT : General Shift

JOB OVERVIEW :

Manage technical information security aspects of handling information security tools, infrastructure security controls reviews/testing, technical security compliance, regulatory compliance, risk assessment, internal/external audits, cybersecurity control evaluations, evaluation/implementation of new security solutions and cloud security controls.

Key Roles/Responsibilities :

- Managing Regulatory Information & Cybersecurity compliance requirements.

- Performing risk assessments of third-party vendors, ensuring compliance with security standards and mitigating potential threats.

- Performing cloud security risk assessments for cloud SaaS solutions.

- Managing Data Leakage Prevention (DLP) controls, review alerts and align SPOCs to curtail the data leaks.

- Review and finetune DLP policies regularly to improve the data security controls.

- Lead internal and external regulatory audits to assess the effectiveness of security controls, vulnerability assessments, ensuring compliance with relevant standards and regulations.

- Ensure Information Security awareness for all employees and vendor staff. Conduct tabletop exercises to discuss various business disruption scenarios for Senior Management.

- Reviewing and Monitoring of the security alerts observed by the SOC & vulnerabilities observed in the infrastructure & networks.

- Brand protection & Dark web alerts monitoring & closure.

- Security Architecture review, Network review, Firewall rule review, Implementation, monitoring & support of various security tools as per the organizational requirements.

- Maintaining various KRI/KPI for Information security controls and present it to various management forum.

- Perform Business Impact Analysis for in-scope business functions.

- He / She will be ensuring that potential security incidents are correctly identified, analyzed, investigated, reported and taken care of the ongoing operational components of Enterprise Information security

- Responsible for evaluating and performing proof of concept of new Cyber Security Products required by Orgnisation

- He/She will be responsible to manage Business Continuity program as per regulatory framework.

- Yearly review of Information Security policies & procedures.