Key Accountability : 1. Develop and manage physical and information security across applications and infrastructure components 2. Supporting the organisation in delivering quality and compliance in order to drive down information security risk. 3. Defending the organisation by building and implementing security process and procedure in order to protect, prevent and respond to risk. Brief Job Description 1. Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management program 2. Facilitate risk assessment and risk management processes 3. Continually review and enhance an information security management framework to be aligned with Industry best practices 4. Develop, update, implement and enforce security policies regularly 5. Manage security operations including health of security infrastructure and policy implementations. 6. Plan and conduct regular vulnerability assessment tests and fix them in time 7. Undertake/participate in regular security audits and ensure closure of observations in a timely manner 8. Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services 9. Provide leadership to the enterprise's information security organization primarily delivered by 3rd party vendors 10. Partner with stakeholders across the organisation to raise awareness of risk management concerns 11. Assist with the overall business technology planning, providing a current knowledge and future vision of technology and systems 12. Build the security set up to be compliant with ISO27001 and other security standards Job Specifications Skills/ Personal Traits: - Great understanding of ISO27001 and able to implement policy according to legislation - Problem analysis and resolution ability - Able to communicate well at senior and board level to help others understand business risk. - Security Auditing experience - Business process understanding, able to understand general business operation activities to avoid business down time. - Security related certificate ideal (CISSP/CISM/CRISC) - Great understanding of ISO27001 and able to implement policy according to legislation Experience: - Professional security management certification. Knowledge of common information security management frameworks, such as ISO/IEC 27001, and NIST. - Minimum of 10 - 12 years of experience in a combination of risk management, information security and IT jobs Qualifications: - BE /B.Tech. in (E&amp;C), Comp Science, IT - Relevant Security and Network certifications from recognized institutes will be preferred - Degree in business administration will be an advantage

Mumbai

Tata Trusts - Lead - IT Security 

Tata Trusts - Lead - IT Security  ,Job Description for Tata Trusts - Lead - IT Security  in Tata Trusts in  Mumbai for (10-12) years of experience. Apply Now!

Job Description for Tata Trusts - Lead - IT Security  in Tata Trusts in  Mumbai for (10-12) years of experience. Apply Now!