The incumbent will be responsible for following : - Develop and maintain plans to implement the information security strategy and information security architectures (e.g., people, processes, technology). - Implement a systemic and structured information risk assessment process and also provide information security advice and guidance (e.g. risk analysis, control selection) in the organization. - Establish, communicate and maintain information security policies that support the security strategy and Information Security Guidelines by IRDA. - Ensure the development, communication and maintenance of standards, procedures and other documentation (e.g., guidelines, baselines, codes of conduct) that support information security policies. - Identify internal and external resources (e.g., finances, people, equipment, systems) required to execute the security program. - Ensure alignment between the information security program and other assurance functions (e.g., physical, human resources, quality, IT). - Integrate risk, threat and vulnerability identification and management into life cycle processes (e.g., development and procurement). Integrate information security requirements into the organization's processes (e.g., change control, mergers and acquisitions) and life cycle activities (e.g., development, employment, procurement). - Report significant changes in information risk to appropriate levels of management for acceptance on both a periodic and an event-driven basis. - Design and develop a program for information security awareness, training and education. - Develop a process to integrate information security controls into contracts (e.g., with outsourced providers, business partners, customers, third parties). - Establish metrics to evaluate the effectiveness of the information security - Develop and implement processes for preventing, detecting, identifying, analyzing and responding to information security incidents. - Develop plans to respond to and document information security incidents. - Establish the capability to investigate information security incidents (e.g., forensics, evidence collection and preservation, log analysis, interviewing). - Develop a process to communicate with internal parties and external organizations (e.g., media, law enforcement, customers).

Mumbai

Tata AIG - Lead - Information Security 

Tata AIG - Lead - Information Security  ,Job Description for Tata AIG - Lead - Information Security  in Tata AIG in  Mumbai for (10-20) years of experience. Apply Now!

Job Description for Tata AIG - Lead - Information Security  in Tata AIG in  Mumbai for (10-20) years of experience. Apply Now!