Felix Pharmaceuticals - Lead / Head - Information Security

Nature and scope of responsibilities :

The Information Security Lead (ISL) is accountable for ensuring appropriate controls are in place for the security of information assets. The ISL safeguards information by seeing that security risks are identified, assessed, accurately reported, and remediated. Additionally, the ISO is charged with ensuring local procedures and activities comply with all regulatory requirements and internal and parent company policies, procedures, guidelines, and standards. The ISL is the centre of competence for Information Security providing an advisory services role and acting as the focal point for security compliance related activities and responsibilities.

Job Description & Key Responsibilities :

• Take the lead on developing, maintaining, and updating the Information Security Strategy and Information Security Program
• Diligently maintain Company's Information Security Framework and underlying policies, procedures, standards, and guidelines
• Actively ensure appropriate administrative, physical, and technical safeguards are in place to protect organization's information assets from internal and external threats
• Meticulously identify, introduce, and implement appropriate procedures, including checks and balances, are in place to test these safeguards on a regular basis
• Thoroughly conduct and complete annual reviews and audits as required engaging both internal business teams across the organization and external resources. Make sure that disaster recovery and emergency operating procedures are in place and tested on a regular basis
• Assists organization to ensure compliance to the applicable regulatory compliance requirements in the areas such as ISO : 27001, SOC II, PCI- DSS, and GDPR
• Act as the committed owner of the security incident and vulnerability management processes from design to implementation and beyond
• Manage and assist in performing on-going security monitoring of information systems including assessing information security risk through qualitative risk analysis on a regular basis, conducting functional and gap analyses to determine the extent to which key business areas and infrastructure comply with statutory and regulatory requirements as applicable, evaluating and recommending new information security technologies and counter-measures against threats to information or privacy, and developing security reports and dashboards. Work closely with Group Information Security team to implement and maintain security standards.
• Ensure effective staff training programs are in place to increase security awareness across the company.

Educational Qualifications :

Knowledge & Skills :

(ref : iimjobs.com)