Head of Information Security and Data Privacy

RateGain; Noida; On-site; INR 150,000 - 250,000; Full time

Job summary

A leading company in the travel technology sector is seeking a Head of Information Security and Data Privacy to spearhead their security initiatives. The role involves ensuring compliance with international standards, managing applications security, and leading data privacy programs such as GDPR and CCPA. The ideal candidate will possess extensive experience, with a proven track record in enterprise risk management strategies and cloud security implementation.

Qualifications

• Expertise in information security and data privacy with over 18 years' experience.
• Experience with a global footprint and developing risk management strategies.
• Proven knowledge of compliance standards such as ISO, SOC, and PCI DSS.

Responsibilities

• Lead security measures for cloud infrastructure ensuring confidentiality and integrity.
• Oversee application security throughout the software development lifecycle.
• Manage identity and access controls and incident response.

Skills

Information security

Data privacy

Cloud security

Application security

Education

18 years of experience in information security

Familiarity with ISO/IEC 27001

Familiarity with NIST frameworks

Job description

Head of Information Security and Data Privacy

We are seeking a Head of Information Security and Data Privacy to lead our security initiatives, including:

• Information security at the enterprise level, covering application security and cloud security.
• Certification compliance with standards such as ISO, SOC, PCI DSS.
• Data privacy, including GDPR and CCPA readiness and compliance.

Key Objectives and Responsibilities:

• Cloud Security: Design, implement, and manage security measures for cloud infrastructure, ensuring data confidentiality, integrity, and availability. Conduct regular security assessments and collaborate with teams to embed security best practices.
• Application Security: Develop strategies for securing applications throughout the SDLC, perform code reviews, and conduct vulnerability assessments.
• Identity and Access Management (IAM): Oversee IAM processes to ensure secure access controls.
• Incident Response and Threat Detection: Develop response plans, monitor security logs, and respond promptly to incidents.
• Security Compliance: Ensure adherence to relevant standards, work with auditors, and demonstrate compliance.
• Security Automation: Implement automation tools to streamline security operations.
• Data Privacy: Lead GDPR and CCPA compliance programs, conduct privacy assessments, and address data processing risks.

Education & Work Experience:

• Over 18 years of experience in information security and privacy.
• Experience with a global footprint.
• Proven expertise in developing enterprise risk management strategies.
• Familiarity with ISO/IEC 27001, NIST frameworks.

This job posting appears to be active and does not indicate it is expired.