Information Security Manager

Responsibilities :

• Perform compliance testing and facilitate remediation for implementation of the Infosys Information Security and Compliance Unified Reporting Framework for Engagements (I-Secure) for the dedicated engagement by working with all relevant stakeholders
• Document and ensure management of information security risks arising out of periodic security due diligence reviews
• Drive process improvements for the engagement in the area of information security
• Provide SME support in handling client reported security incidents and ensure timely closure of the raised incidents and submission of Root Cause Analysis (RCA) by various with various internal stakeholders such as the security incident management team (SIMT)within ISG
• Communicate information security incidents to client within stipulated time frame as per the contract and track closure of all reported security incidents
• Get required internal and client approvals for Business as Usual (BAU) security activities such as Vulnerability scans, installation\extensions, Change Requests, admin rights, additional software requirements, floor visits, and all security exceptions
• Independently Drive periodic meetings with client security team by collating required details for defined parameters
• Manage ISG driven internal SPOT checks
• Facilitate Implementation of all the information security contractual requirements within the engagement
• Make security presentations and give required assurance to the client during audits and visits at different locations
• Facilitate closure of information security audit findings received during client conducted audits & spot checks
• Report to internal ISG and delivery management about any Cyber security issues and keep them periodically informed about engagement’s compliance posture
• Facilitate implementation of various standard, regulatory and compliance requirements such as ISO27001, SSAE18, PCI DSS, HIPAA etc. as applicable to the engagement
• Support for responding to information security related request for information / proposals (RFI / RFPs), review master services agreements and any renewals or amendments for the engagement
• Analyze data generated during ongoing information processing activities to generate information security metrics that indicate the level of risk to the engagement
• Conduct periodic information security awareness sessions for the engagement

Skills and knowledge expectations :