Niyo Solutions - Manager - Information Security

PROFILE : ISM / Information Security Manager.

Niyo Information Security function looking for a candidate who can manage Information Security operations in order to maintain and improve Information Security practices, governance and control desired from the role.

Area Of Responsibilities :

• Provide support to GRC team with artefacts / evidence collection required by them during ISMS, Internal and External Audits.
• Facilitate support and coordination required during any audit activities.
• Track compliance & Reviews of periodic ISMS activities such as Disaster Recovery related drill, Backup & Restoration, Change Management, IP Whitelisting / ACL, Access and Roles Reviews, IS Signoff for new development and features etc.
• Control adoption of ISMS / Information Security Policy across all department and function.
• Track effectiveness of Information Security department specific KPIs.
• To ensure current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement done on time.
• Oversee technological upgrades, improvements and major changes to the information security environment.
• Perform periodic review of Change Management, Rules and Configuration.
• Review control compliance required before Information Security Sign-off.
• Review of Information Security events monitoring and Incidents.
• Periodic review of Information Security related supplier for its SLAs.
• Review Information Security Effectiveness measurement metrics across department and function as per documented procedure and associated templates.
• Manage Information security awareness related training to organization personnel.
• Provide Information Security training for new onboarding.
• Manage Information Security specific subscription / license and certification and periodically review Information Security related spending to align with the Budget cap.
• Manage and Control issuance of Digital Certificates and Encryption Keys.
• Serve as a focal point of contact for the information security team and the Vendor / Partner or organization.
• Communicate information security goals and new programs effectively with other department managers within the organization.
• Evaluate and assess any platform or solution required within Information Security function and ensure effective deployments and its efficient use.
• Periodically undertake the Incident Response simulation / table-top exercise and drill to test its effectiveness.
• Create and publish reports, dashboards, metrics for Information Security operations and presentation to Department Head / Management.
• Providing Department Head / Management oversight with a realistic overview of risks and threats in the technology environment.
• Manage the process improvement within the Information Security function.
• Identify, assess, and resolve complex issues within own area of responsibility.

Desired Skills :

Eligibility :

(ref : hirist.tech)