Senior Information Security Engineer

Job Title: Senior Information Security Engineer (ISO, Compliance)

Location: Whitefield, Bengaluru -Hybrid

Key Areas:

You can apply by filling the form

Roles & Responsibilities:

• Develop and finalize policies, procedures, and guidelines related to IT and Infosec
  domains in alignment with industry best practices (ISO 27001 , GDPR and SOC 2). Align internal IT and Infosec processes as per ISO 27001 and SOC 2 standards and security guidelines.
• Assist in defining and reviewing the key metrics for management reporting.
  Developing cyber security standards, including incorporating industry practices and applicable compliance requirements.
• Develop review checklists, questionnaires, and manage evidences to assist the IT
  vendor risk management process.
• Perform 3rd party security due-diligence reviews and periodic vendor risk
  assessments to assess vendor compliance.
• Coordinate with external stakeholders and auditors for IT and Infosec related reviews
  Coordinate for conducting periodic penetration testing exercises on in-scope applications and related infrastructure. Coordinate with stakeholders for timely closure of open risks.
• Assist in imparting security awareness training and executing phishing simulation
  exercises to employees.
• Assist IT and Infosec in gathering the metrics data and prepare management
  dashboards.
• Coordinate and facilitate SOC 2 audits, acting as the primary point of contact for the
  external auditor.
• Gather evidence and documentation to demonstrate compliance with SOC 2
  requirements. Address any audit findings and implement corrective actions.

Experience

• Should have 4-5 years of experience in information security domain and minimum
• Should have 4 of years in overall IT and Infosec governance related activities.
• Must have sound knowledge in defining processes, developing policies, procedures,
  and guidelines, and preparing management reporting dashboards.
• Must have experience in guiding teams with respect to SOC 2 requirements
• Developing and implementing enterprise governance, risk, and compliance strategy
  and solutions.
• Familiarity with industry standards and regulations including PCI, ISO27001, SOC 2,
  GDPR, CIS, NIST is desired.
• Candidates from BFSI experience will be preferred
• Fair understanding of public cloud models (e.g. AWS, Google, Microsoft Azure) and
  their security implications.