Director Information Security - Pune, India - Searce Inc

Description

Job Responsibilities

Develop, implement, and manage security policies, procedures, framework and plansResponsible for managing a teamRecommend fixes, security patches, and overlook other measures required in the event of a security breachDirect and coordinate the activities of all security personnel, engage in the implementation of safety and security procedures for the department, and provide assistance and advice to other departments in relation to securityAble to perform Risk Assessment, Risk Analysis, Risk Management, Setting up Risk Mitigation ProcessesResponsible for handling client queries, display security policies and recommend clients about our security practicesBuild strong relationships with the external stakeholders (clients, suppliers, other major bodies)Experience in Vulnerability, Threat, Patch, Incident and Problem ManagementExperience in IT security tools / technologies as SIEM, Splunk, Nessus, Vontu, Websense etc.

Knowledge in Ethical Hacking, Firewall, IPS/IDS, Servers, DLP, Identity and Access Management, Antivirus and Security ProtocolsExperience in ISO 27001/PCI Audits / implementation and Infra / IT Security AuditExperience in Infosec Awareness ProgramGRC (Governance, Risk & Compliance) Management

Qualifications

Is Education overrated? Yes. We believe so. But there is no way to locate you otherwise.

So we might look for at least a Bachelor's or Master's degree, along with the following:

Proven professional and technical experience with years of industry experienceTime management, high level of technical skills, technology stack knowledge, problem solving skills, and customer service expertise

Strong organizational and managerial skills:

ability to track and prioritize multiple issuesExcellent oral and written communication and presentation skills requiredWorking on support tools like Service now, Freshservice etc.

Readiness to work in a 24X7 environmentCertification in Information security such as CEH, CISSP, ISO 27001 Lead Implementer, CISM, Security+ or equivalent would be an added advantage