Assistant Manager/Manager - Security Compliance

About Organization:

Larsen & Toubro Ltd, commonly known as L&T, is an Indian multinational conglomerate company, with business interests in engineering, construction, manufacturing, technology, information technology and financial services, headquartered in Mumbai.

The company is counted among world's top five construction companies. The L&T Group comprises of 93 subsidiaries, 5 associate companies, 27 joint ventures and 35 jointly held operations, operating across basic and heavy engineering, construction, realty, manufacturing of capital goods, information technology, and financial services.

Industry Specialties:

Aerospace, Infrastructure, Shipbuilding, Construction, Defense, Finance, Forging, Hydrocarbon, Information Technology & Engineering Services, Construction Equipment, Railways, Boilers, Process Plant, Turbines, Power, Renewable Energy, Manufacturing, and Green Hydrogen.

This role is based out of Corporate IT in Headoffice:

Job Location: Powai, Mumbai Working Model: Work from office

Operating Model: 6 days (2nd and 4th Saturdays Off)

EDUCATIONAL QUALIFICATIONS: B.Tech/B.E./MCA/M.Sc. In Cyber Security Specialization, ISO 27001 Lead Auditor certified preferred.

EXPERIENCE: Min. 3-8 years in Information security compliance

Job Profile:

Sound knowledge of Info Sec standards such as ISO27001

Basic understanding of following security technologies (EDR, DLP, PIM, IRM, SIEM, SOC etc) Should have performed internal audits for standards & frameworks such as ISO27001, DPDP act, etc

Knowledge of Risk Frameworks

Job Responsibilites

Perform Cyber Assurance assessments within L&T group of companies

Keep track of control remediations across companies & guide on process & technology controls Operationalize & Run GRC program Explore automation opportunities in audit & GRC areas Evaluate & run proof of concept for GRC technologies

Maintain oversight on current & emerging threat landscape.

Accordingly update cyber assurance framework As ISMS manager, run ISO27001 program for corporate

Good communication skills (verbal/written)

Should be a self-starter, motivated

COMPENTENCIES

Security certifications (CISA, CISSP, CISM), ISO27001 lead auditor desirable