Responsibilities - Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management program to ensure that the integrity, confidentiality and availability of information is owned, controlled or processed by the organization. - Develop, maintain and publish up-to-date information security policies, standards and guidelines. Oversee the approval, training, and dissemination of security policies and practices. - Create, communicate and implement a risk-based process for vendor risk management, including the assessment and treatment for risks that may result from partners, consultants and other service providers. - Create and manage information security and risk management awareness training programs for all employees, contractors and approved system users. - Work directly with the business units to facilitate IT risk assessment and risk management processes, and work with stakeholders throughout the enterprise on identifying acceptable levels of residual risk. Report any significant risks to ISC. - Manage the enterprise's information security organization. This includes hiring, training, staff development, performance management and annual performance reviews. - Provide regular reporting on the current status of the information security program to enterprise risk teams, senior business leaders , Information Security Committee (ISC) and the Internal Risk Committee(IRC) as part of a strategic enterprise risk management program. - Monitor information security incident management i.e. identification, response, remediation and reporting. Manage security incidents and events to protect corporate IT assets, including intellectual property, regulated data and the company's reputation. - Ensure that security programs follow relevant laws, regulations and policies to minimize or eliminate risk and audit findings. Liaise with external agencies, such as law enforcement and other advisory bodies as necessary. - Monitor the external threat environment for emerging threats and advise relevant stakeholders on the appropriate courses of action. - Develop and oversee effective disaster recovery policies and standards to align with enterprise business continuity management program goals. - Ensure the consistent application of policies and standards across all technology projects, systems and services, including, but not limited to, privacy, risk management, compliance and business continuity management.

Mumbai

Tata AIG - Lead - Information Security Officer 

Tata AIG - Lead - Information Security Officer  ,Job Description for Tata AIG - Lead - Information Security Officer  in TATA AIG in  Mumbai for (6-12) years of experience. Apply Now!

Job Description for Tata AIG - Lead - Information Security Officer  in TATA AIG in  Mumbai for (6-12) years of experience. Apply Now!