Sr Manager/Manager - Information Security

Desired Skills and Experience

Job Band: E3

Education - BE, MCA, MSc

Exp: 6-10 years

Certification: CISA, CISM, CISSP ( one or more)

Designation:Sr Manager/Manager

Location: Noida,Chennai,Bangalore

- Provide expert advice to the organisation on ISO 27001 and, generally, on information risk analysis/management.

- Develop, implement and enforce suitable and relevant information security policies, ensuring that these are compliant with Co/Customer Information Security policies and other legislation and regulations related to information security

- Co-ordinate information security activities (including training) with GIT, and Information Governance (e.g. Records Management, Consent, Confidentiality, Data Protection Act, Data Accreditation) in the delivery organisation, and attend such user group meetings as necessary

- Develop and implement, together with suitable materials, an information security awareness and training programme

- Develop and implement a comprehensive Business Continuity program as required by the contract and the related training programme.

- Investigate suspected and actual breaches of security and undertake reporting/remedial action as required. Report and maintain a log of any incidents and remedial recommendations and actions.

- Continuously assess the shortfall between both actual security measures in place and being effective and those established at a policy level thus highlighting deficiencies for remedial action.

- Establish and maintain a register of data owners for sets of information (e.g. paper files, databases) and educate the data owners on their responsibilities (what is the data, how is it used, who has access to it).

- Develop and implement a mechanism for defining and maintaining information flow maps within Co, and between the Co and client organisations - providing controls where necessary

- Maintain Risk, Issue and Change registers for information security.

- Report regularly to the CISO office on the effectiveness of information security through established metrics

- Maintain currency with security and security enhancing technologies and brief colleagues as needed to enable measures to be implemented where and when necessary/desirable.

- Conduct periodic audit on projects. Provide advice and take action, where necessary, in response to Audit findings and recommendations in respect of information security

- Undertake any other duties commensurate with the grading of the post.