Assistant Manager CISO

Shriram Life Insurance; Hyderabad; On-site; INR 600,000 - 900,000; Full time

Job summary

Shriram Life Insurance seeks a security professional to assist the CISO in meeting IRDAI compliance and to strengthen IT risk controls. You will conduct sample reviews, support attestations, and contribute to security trainings, helping foster a stronger security culture across the organization.

Responsibilities include second-line reviews of DLP/SOC, risk assessments for new launches, policy reviews, and awareness activities for staff and third parties.

Qualifications

• BE / BTech / MCA / PG in computer applications or information cyber security.
• Certified Information Security Auditor (CISA) is preferred.
• ISO-27001 certification is desirable.

Responsibilities

• Assist CISO to meet IRDAI information and cyber security compliance.
• Support risk control framework through reviews and attestations.
• Contribute to IT security training and workshops.
• Periodic review of DLP and SOC from 2nd line perspective.
• Thematic reviews of IT processes and third party assessments.
• Review IT and BP policy annually.
• Review IS standards on a periodic basis.
• Raise security awareness among employees and third parties.
• Aid IS governance and IT risk reporting to IS team.

Skills

Communication

Report writing

Teamwork

Analytical skills

MS Office

Education

BE / BTech / MCA / PG in computer applications / information cyber security

CISA

ISO-27001

Job description

Role & responsibilities:

1. Assist CISO to meet the IRDAI Information and Cyber Security Compliance

2. Support Operational Risk Control Framework (ORCM) in the organization by conducting sample reviews and effectiveness check on Risk & Control Self-Assessment / Business Standard attestation / Issue Closure/ Risk events/ New launches/ Change implementation related to Information Technology and Cyber Security

3. Contribute to IT security culture through training/work shops

4. Periodic review of DLP and SOC as 2nd Line perspective

6. Thematic Reviews of IT processes/ Third party Information Security Assessments/ Information Security and Risk Assessment of New/Change Applications/Implementations

7. Review of IT and BP policy and procedure once in a year

8. periodic review of IS standards

9. Participate/Facilitate awareness around Information Security protocols / Phishing etc., amongst employees/third party.

10. Assist CISO on IS Governance and IT risk management standards including methodology for assessing project risks and reporting Information Security risks to IS Team.

Qualifications:

• BE / B Tech / MCA / Post graduation in Computer applications, information cyber security
• Certified Information Security Auditor (CISA)
• ISO-27001 Certified

Experience:

• 2-3 years plus

Preferred:

• Experience in a combination of risk management, information security and IT jobs

Skills/ knowledge:

• Good verbal and written communication skills
• Strong Report Writing Skills
• Team Work
• Analytical skills
• MS Office (Word, Excel & PowerPoint)