Exciting opprtunity -Senior Manager -Infosec | Navi Mumbai |

Job description

We're Hiring | Senior Manager -Infosec | Navi Mumbai |

QualityKiosk Technologies is looking for an experienced Senior Manager -Infosec (12+ Years) to join our growing team and drive transformation initiatives.

Website: www.qualitykiosk.com

Location: Navi Mumbai- Mahape -Millennium Business Park (MBP)

Preference: Immediate Joiners
Apply: clive.lobo@qualitykiosk.com

What We're Looking For Senior Manager -Infosec

Experience and Qualifications

• A minimum of 10+ years of Information Security experience, with min 8 years in a leadership role having demonstrated end to end responsibility of the overall Risk Management & Compliance (Infosec) program. Banking experience is strongly preferred and will have more weightage.
• A bachelor's degree in information systems or equivalent work experience; a BSc in IT with specialization in information security is preferred.
• Certifications from [list detailed below].
• Knowledge and understanding of relevant legal and regulatory requirements, ISO 27001, ISO42001, ISO 17025, ISO 9001, SOC2, ISO 27701, DPDP, GDPR etc
• Experience with common information security management frameworks, such as International Standards Organization (ISO) 2700x, the IT Infrastructure Library (ITIL) and Control Objectives for Information and Related Technology (COBIT) frameworks etc
• Strong leadership skills and the ability to interact with and build strong relationships at all levels and across all business units and organizations and understand business imperatives.
• Exhibit excellent analytical skills to analyse security requirements and relate them to appropriate security controls. A strong understanding of the business impact of security tools, technologies and policies.
• Excellent verbal, written and interpersonal communication and program management skills, including the ability to communicate effectively with the IT organization, project and application development teams, management and business personnel; in-depth knowledge and understanding of information risk concepts and principles as a means of relating business needs to security controls; an excellent understanding of information security concepts, protocols, industry best practices and strategies.
• Experience working with legal, audit and compliance staff. Proficiency in performing risk, business impact, control and vulnerability assessments, and in defining treatment strategies.
• Experience in system technology security testing (vulnerability scanning and penetration testing).
• Familiarity in application technology security testing (white box, black box and code review). Certifications (preferred)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• ISO 27001: 2013 Lead Auditor / Implementer
• ISO 9001:2015 - Quality management systems
• ISO/IEC 17025 - Competence of testing and calibration laboratories
• ISO 22301 - Business Continuity Standard • ISO 27701 PIMS Lead Auditor • SOC2 / DPDP / GDPR related certification

Roles and Responsibilities A. Infosec Strategic Support and Management:

• Assist CISO in developing, implementing and monitoring a comprehensive enterprise information security and IT risk management program to ensure that the integrity, confidentiality and availability of information is owned, controlled or processed by the organization.
• Assist CISO in developing and maintaining and publishing up-to-date information security policies, standards and guidelines and any client specific requirement pertaining to Information Security.
• Oversee the approval, training, and dissemination of security policies and practices. • Create, communicate and implement a risk-based process for RBAC, TPRM, including the assessment and treatment for risks that may result from partners, consultants and other service providers.
• Contribute to creation and managing information security and risk management awareness training programs for all employees, contractors and approved system users.
• Work directly with the business units to facilitate IT risk assessment and risk management processes and work with stakeholders throughout the enterprise on identifying acceptable levels of residual risk.
• Provide regular reporting on the current status of the information security program to CISO.
• Provide infosec / risk guidance for implementing IT projects, including the evaluation and recommendation of technical controls. Coordinate information security risk management projects with resources from the IT organization and business unit teams. • Ensure that security programs comply with relevant laws, regulations and policies to minimize or eliminate risk and audit findings.
• Manage security incidents and events to protect corporate IT assets, including intellectual property, regulated data and the company's reputation. Coordinate the development of implementation plans and procedures to ensure that business-critical services are recovered in the event of a security event. Provide direction, support and in-house consulting in these areas
• Monitor the external threat environment for emerging threats and advise relevant stakeholders on the appropriate courses of action.

B. Security Liaison:

• Liaise among the information security team and corporate compliance, audit, legal and HR management teams as required.
• Liaise with external agencies, such as law enforcement and other advisory bodies as necessary, to ensure that the organization maintains a strong security posture.
• Liaise with Business Units and IT in understanding and responding to security audit observations or non-conformities reported by auditors.
• Assist CISO in managing security issues and incidents and participate in problem and change management forums. Ensuring timely reporting and adequate participation in investigation for ICT security incidents with customers, regulatory agencies and law enforcement agencies as applicable.

C. Architecture/Product Engineering Support

• Provide necessary guidance, Consult with IT and security staff to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and software. Recommend and coordinate the implementation of technical controls to support and enforce defined security policies.
• Research, evaluate, design, test, recommend or plan the implementation of new or updated information security hardware or software, and analyse its impact on the existing environment; provide technical and managerial expertise for the administration of security tools.
• Develop a strong working relationship with the Infosec team to develop and implement controls and configurations aligned with security policies and legal, regulatory and audit requirements.

Operational Support

• Oversee and execute critical Information Security and Risk Management functions, including Change Management to ensure controlled and secure modifications across systems, and Incident Management, Response, and Remediation to swiftly address and resolve security events. You will be responsible for maintaining Platform Security and Compliance in alignment with regulatory and organizational standards, as well as managing PII Data Purging to safeguard sensitive information. Key responsibilities also include Dark Web and Social Media Monitoring to proactively identify potential threats, Infosec Ticket Management for efficient tracking and resolution of security issues, and Exception Management to handle deviations from established policies. Additionally, the role requires continuous Email DLP Monitoring to prevent data leakage and ensure secure communication channels.

indly revert with your updated CV and below details at email ID - clive.lobo@qualitykiosk.com

Full Name:

Total Exp:

Rel exp in -

Relevant Hands-on experience - Information Security experience?

Current Company:

CTC:

Fixed & Variable?

ECTC:

Notice Period:

Reason for job change:

Qualification:

Current Residential location:

Ready to work from office?

Preferred job location: Mumbai

Any offers in Hand? (Please share details CTC, LWD, DOJ):

Thanks & Regards,

Clive Lobo

QualityKiosk Technologies

clive.lobo@qualitykiosk.com