Director - CyberSecurity

Job description

Job responsibilities

Perform security risk and compliance assessments for the security controls identified defined and to be implemented for the specific client project

Review Projects and their technical design documents for Information security risks and advise on suitable controls and mitigations at early stages of the program

Fair understanding of Technology Landscape Applications Infrastructure Cloud and review Clients information security and related threats and vulnerabilities legal and regulatory requirements

Expertise in controls testing across the domains including Patch Management Backup management Network security management Identity and Access Management Vulnerability Management Software Asset Management cyber event logging and monitoring and technology change management controls

Review and give an opinion on the control design of supplier and their organization technical specifications against Client security control requirements

Identify or design the controls for implementation based on the outcome of Risk Assessment its remediation and residual risk

Ensure all the risks are documented classified and tracked with appropriate action as per the IRM standards

Ensure all the controls outlined for an applicationInfrastructure are designed effectively and able to test the same and measure their effectiveness of controls using some parameters

Identify the risks in the Client Projects provide recommendations for remediation of identified risks

Assess and classify all potential business and infrastructure information risks

Job Qualifications

Bachelors degree in Computer Science Information Technology or related field

8-10 years of experience in GRC

Good Understanding of Security Standards like ISO 270012 NIST CSF NIST 80053 and PCI

Excellent communication and troubleshooting skills

Ability to work independently and in a team environment

Strong organizational and analytical skills

Familiarity with audit requirements and processes

Knowledge of scripting languages is a plus

Certification is mandatory

Handson Experience with tools like

Catachi Cos Complianceai

BigID

OneTrust

StealthINTERCEPT