Information Security Consultant

Rakuten Symphony; Bengaluru Urban; On-site; USD 4,548 - 9,096; Full time

Job summary

An established industry player is seeking an Associate in Information Technology to enhance its information security framework. This role involves defining and developing security policies, conducting risk assessments, and ensuring compliance with ISO 27001 standards. The ideal candidate will have a strong grasp of governance, risk, and compliance frameworks, along with hands-on experience in security tools and technologies. Join a dynamic team committed to maintaining the highest standards of information security and contribute to the organization's success in a rapidly evolving digital landscape.

Qualifications

• Experience in documenting security policies and risk controls.
• Possesses certifications like ISO27001, CISSP, CISA, CISM.
• Hands-on experience in ISO 27001 standards.

Responsibilities

• Define and review information security policies and procedures.
• Assist in security metrics and maturity reporting.
• Conduct internal information security audits.

Skills

Information Security Policies

Risk Assessment

ISO 27001 Standards

Governance, Risk and Compliance

Incident Management

Data Protection

Education

ISO27001 LA/LI, CISSP, CISA, CISM certifications

Tools

IAM

SIEM

DLP

EDR

MFA

VPN

MDM

Job description

Get AI-powered advice on this job and more exclusive features.

Direct message the job poster from Rakuten Symphony.

Responsibilities:

• Define, Develop and review information security policies, procedures, guidelines, forms and templates as per best practices.
• Assist in security Metrics and Maturity – Provide and track Dashboard / Reports as per defined parameters. (ISO MOE)
• Review, Report and track Security Self-Assessment report.
• Reporting, tracking and escalating Security Audit of existing Application by Third Party.
• Assist and Recommend measures to ensure compliance with ISO 27001 or any such best practices.
• Assist to get ISO 27001 certification by identification of risks and implementation of appropriate controls in the ISO Audit scope. Recommend practical and implementable controls based on business, process and technology requirements for ISO 27001:2013/2022.
• Support post implementation and continuous audits for ISO 27001:2013/2022 and ensure compliance.
• Risk assessment of activities and coordinate with stakeholders till closure signoff / risk acceptance.
• Prepare, Collate and submit periodical security reports like patch management report, antivirus / anti-spam report, IPS report, security incident report, Software Vulnerability Report and third party security assessment reports on Information Security Activities to Management. Update the daily, weekly and monthly dashboards.
• Conduct periodic Internal Information Security Audit of different functions within Rakuten India.

Qualifications:

• Possesses certifications such as ISO27001 LA/ LI, CISSP, CISA, CISM certification (Good to have).
• Knowledge and Hands-on experience in ISO 27001 standards.
• Experience in documenting the security policies/ procedures/ risk and controls matrix and defining KPI/ risk treatment plans/ security roadmaps.
• Advice on Governance, Risk and Compliance Frameworks.
• Responsible to assist team in review / implement Information Security controls in areas as mentioned, but not limited to:
• Infrastructure and Network Security, configuration of security devices.
• Privilege/ User identity and access management.
• Incident management process, SLA performance and monitoring.
• Business Continuity Planning, IT Disaster Recovery planning, Backup and restoration process.
• End point protection, Antivirus management, Asset Management.
• Information Handling, Data Protection and data privacy (including controls with respect to GDPR/ HIPAA).
• Good understanding of various tools and technologies such as IAM, SIEM, DLP, EDR, MFA, VPN, MDM.
• Responsible for conducting vendors risk assessment and providing a holistic view on risk exposure due to outsourcing.
• Manages day-to-day relationships at mid and lower levels.

Seniority level

Associate

Employment type

Full-time

Job function

Information Technology

Industries

IT Services and IT Consulting