Incred-Senior Infosec Engineer

Job Title : Senior Information Security Engineer

Experience Required : 4-5 years in Information Security

Location : Whitefield, Bengaluru

Job Description

• Develop and finalize policies, procedures, and guidelines related to IT and Infosec domains in alignment with industry best practices (ISO 27001 , GDPR and SOC 2).
• Align internal IT and Infosec processes as per ISO 27001 and SOC 2 standards and security guidelines.
• Assist in defining and reviewing the key metrics for management reporting.
• Developing cyber security standards, including incorporating industry practices and applicable compliance requirements.
• Maintain the the security risk register and related policies
• Maintain the inventory of IT vendors as per regulatory guidelines.
• Develop review checklists, questionnaires, and manage evidences to assist the IT vendor risk management process.
• Perform 3rd party security due-diligence reviews and periodic vendor risk assessments to assess vendor compliance.
• Coordinate with external stakeholders and auditors for IT and Infosec related reviews
• Coordinate for conducting periodic penetration testing exercises on in-scope

applications and related infrastructure. Coordinate with stakeholders for timely closure of open risks.

○ Coordinate and facilitate SOC 2 audits, acting as the primary point of contact for the external auditor.

○ Gather evidence and documentation to demonstrate compliance with SOC 2 requirements.

○ Address any audit findings and implement corrective actions.

Key Areas : SOC 2 Type 1 and Type 2, ISO 27001, GDPR ,security governance, vendor security due-diligence, vendor security reviews and assessment, preparation of security checklist, security awareness / phishing simulation, management dashboards,

manage key metrics for IT and Infosec.

Certifications : good to have- CISSP, CISM, ISO 27001, or CISA (Knowledge and experience in SOC 2 is mandatory)

Experience

and solutions.

support the organization.

Skills :