Information Security Engineer

Acesoft Labs; Bengaluru; On-site; INR 1,400,000 - 3,000,000; Full time

Job summary

Acesoft Labs is seeking an Information Security Risk Specialist based in Bengaluru. The role focuses on designing and maintaining an enterprise-wide risk program, conducting risk assessments, and ensuring alignment with regulatory standards.

The ideal candidate will bring 7–9 years of information security experience, strong governance capabilities, and certifications such as CISSP/CISM/CRISC. Collaboration across global teams and effective communication are essential.

Qualifications

• Bachelor's degree in Information Security, Cyber Security, CS, or related field.
• 2
• 3

Responsibilities

• Develop and maintain an enterprise-wide information security risk program.
• Identify, assess, and document information security risks aligned with business objectives.
• Perform risk assessments, vulnerability analyses, and impact evaluations.
• Collaborate with cross-functional teams for risk mitigation plans.
• Monitor and report risk metrics and KPIs to stakeholders.
• Lead incident response planning and cyber investigations when needed.
• Prepare risk assessment reports for senior management.
• Ensure compliance with ISO 27001, NIST, GDPR, and related standards.

Skills

Analytical thinking

Communication skills

Presentation skills

Cross-functional collaboration

Problem-solving

Project leadership

Education

Bachelor's degree in Information Security/CS

CISSP / CISM / CRISC certification

Advanced degree preferred

Job description

Description:

Information Security Risk Specialist

Experience: 7 to 9 years

Location: Bengaluru

Key Responsibilities:

• Develop, implement, and maintain an enterprise-wide information security risk management program.

• Identify, assess, and document information security risks, ensuring alignment with business objectives.

• Perform risk assessments, vulnerability analyses, and impact evaluations on IT systems and processes.

• Collaborate with cross-functional teams to establish risk mitigation strategies and action plans.

• Monitor, track, and report on risk metrics and key performance indicators (KPIs).

• Stay updated on regulatory requirements and ensure compliance with standards such as ISO 27001, NIST, GDPR, etc.

• Develop and maintain comprehensive process documentation and generate reports tailored to the needs of various stakeholders.

• Drive security awareness programs and train employees on risk management practices.

• Prepare and present detailed risk assessment reports to senior management.

• Lead incident response planning and participate in cybersecurity investigations when necessary.

Qualifications:

Education:

• Bachelors degree in Information Security, Cyber Security, Computer Science, Information Science, or a related field.

• Advanced degrees (e.g, Masters) or certifications (e.g, CISSP, CRISC, CISM, CEH) are a plus.

Experience:

• 5+ years of experience in information security, risk management, or related domains.

Skills and Competencies:

• Comprehensive understanding of frameworks such as ISO 27001, NIST Cybersecurity Framework, COSO, and COBIT.

• Proven analytical expertise in evaluating and prioritizing risks effectively.

• Advanced proficiency in utilizing security tools for risk assessment and mitigation.

• Strong preference for candidates with certifications like CISSP, CISM, CRISC, or equivalent.

• Exceptional communication and presentation skills, with a proven ability to collaborate effectively across diverse teams.

• Demonstrated problem-solving capabilities, including critical thinking and informed decision-making under pressure.

• Skilled in leading security initiatives and managing projects across global teams.

• A strategic mindset paired with keen attention to detail.

• Resourceful and decisive under high-pressure situations.

• An effective team player with exceptional interpersonal and collaboration skills.