Verified Job
Accounting - Finance
ISSIS Security Officer
Accounting - Finance
#298126
Remote / WFH
Job Description
The Security Officer serves as a subject matter expert for governance and compliance frameworks and regulations, policy development, Identify and monitor non- compliance and escalate when appropriate, Act as the champion for achievement of GRC capabilities, Manage monthly, Quarterly Information Security KRI, Develop, implement, and manage policies specific to GRC capabilities.
Key Responsibilities
• Defining and implementing IT policies / IS Security Policies
• Identify risks in the IT processes
• Define controls and analyze implications of making process changes
• Draw up Risk Control Matrices
• Plan and conduct process audits within IT
• Facilitate issue resolution with the IS Auditors.
• Evaluate IT Security related products
• Understand, implement, monitor and review of various regulatory / compliance frameworks like SOX, COBIT, ITIL, ISO 27001, ISO 22301, ISO 31000 Basel etc.
• Conduct training programmes on Information Security, Risk, compliance and regulatory aspects.
• Analysis of various system generated reports, logs, audit reports and VAPT reports.
Qualifications:
Optimal qualification for success on the job is:
• First class Graduate/Post Graduate in Science or Engineering from a reputed University with exposure to information systems.
• Qualifications like CISA, CISM or CGEIT, CISSP, CEH, BCM, LA in ISO 27001, LA in ISO 22301 or any other recognized qualification in IT Risk Assessment will be preferred.
• Thorough knowledge and experience in networking along with certifications like CCNA will also be preferred.
• 7 to + Years of Experience
• Experience in:
• Identification, evaluation and documentation of process flows, risks and controls.
• Information systems management, IT service management as well as process development and design.
• IT Security - in areas like network security, remote access etc.
• IT Governance, IT Audits, Projects Execution, IT Planning, etc.
• Handling various security products/solutions like DLP,
• Third party vendor assessment
• PCI DSS implementation
Role Proficiencies:
For successful execution of the job, the candidate should possess the following:
• Current Information Technology management standards in the industry as a whole such as COBIT, ITIL, ISO 27001, ISO 31000, PCIDSS, RBI guidelines on Information Security and best practices in BFSI.
• Formulating IT Governance objectives and goals and developing effective techniques for deriving these objectives from IT initiatives.
• Good understanding and working experience in IT Services management and use of maturity and process improvement models
Key Responsibilities
• Defining and implementing IT policies / IS Security Policies
• Identify risks in the IT processes
• Define controls and analyze implications of making process changes
• Draw up Risk Control Matrices
• Plan and conduct process audits within IT
• Facilitate issue resolution with the IS Auditors.
• Evaluate IT Security related products
• Understand, implement, monitor and review of various regulatory / compliance frameworks like SOX, COBIT, ITIL, ISO 27001, ISO 22301, ISO 31000 Basel etc.
• Conduct training programmes on Information Security, Risk, compliance and regulatory aspects.
• Analysis of various system generated reports, logs, audit reports and VAPT reports.
Qualifications:
Optimal qualification for success on the job is:
• First class Graduate/Post Graduate in Science or Engineering from a reputed University with exposure to information systems.
• Qualifications like CISA, CISM or CGEIT, CISSP, CEH, BCM, LA in ISO 27001, LA in ISO 22301 or any other recognized qualification in IT Risk Assessment will be preferred.
• Thorough knowledge and experience in networking along with certifications like CCNA will also be preferred.
• 7 to + Years of Experience
• Experience in:
• Identification, evaluation and documentation of process flows, risks and controls.
• Information systems management, IT service management as well as process development and design.
• IT Security - in areas like network security, remote access etc.
• IT Governance, IT Audits, Projects Execution, IT Planning, etc.
• Handling various security products/solutions like DLP,
• Third party vendor assessment
• PCI DSS implementation
Role Proficiencies:
For successful execution of the job, the candidate should possess the following:
• Current Information Technology management standards in the industry as a whole such as COBIT, ITIL, ISO 27001, ISO 31000, PCIDSS, RBI guidelines on Information Security and best practices in BFSI.
• Formulating IT Governance objectives and goals and developing effective techniques for deriving these objectives from IT initiatives.
• Good understanding and working experience in IT Services management and use of maturity and process improvement models
