Job Summary

To act as an SME and demonstrate Cyber Security Risk expertise in applicable domain, facilitate implementation and demonstrate its capability to potential internal and external customers and To manage various audit programs (SSAE16, ISMS, PCI etc.) through resource management, effective InfoSec controls designing, and measuring the program effectiveness via various KPI metrics

Key Responsibilities

1. To Act A Subject Matter Expert Within The Function And To Lead Complex Threat Investigations & Vulnerability Assessments For Multiple Assests/Applications, Performs Security Architecture Reviews, Documents Draft For Hardening Security Standards And Leads Discussions With Key Stakeholder On Issues Affecting Cyber Security Risk Governance
2. To Facilitate External Certification/Attestation Audits And Reporting And Management Review.
3. To Facilitate Program Development And Maturation And To Partner & Work With Global Information Technology, Risk & Compliance And Other Internal Stakeholders
4. To Lead And Execute Cyber Security Program Functions And Ensure Operational Sustenance And Effectiveness Of Cyber Security Functions
5. To Represent Infosec Functions In Various Client Visits / Client Audits, Identify Areas Where Focus Is Required From Control Design And Effectiveness Perspective Through Tracking Of Monthly Reports/Dashboards; And Highlight Areas Where Controls Are Lagging.
6. To Review The Audit Report(S) For Closure And To Design Isms/Ssae16/Pci Dss Security Controls And Test/Audit Their Effectiveness.

Skill Requirements

Other Requirements