Manager - Cyber Security (ISMS)

BDO India; Mumbai; On-site; INR 900,000 - 1,300,000; Full time

Job summary

BDO India is seeking a cyber security professional to help deliver advisory and technical support across information security, risk and governance. You will design, build and deploy pragmatic security solutions, align to ISO 27001/ISO 42000, and perform IT risk assessments in line with industry practices.

Candidates should have 4–7 years of relevant ISMS/BCMS and data privacy experience, with certifications such as CISA or CISSP preferred.

Qualifications

• 4–7 years of experience implementing ISMS/BCMS and data privacy projects.
• Preferred certifications: ISO 42000, CISA, CISSP.
• Experience designing, building and maintaining information security frameworks.

Responsibilities

• Design, develop, implement, and maintain information security frameworks aligned to ISO standards.
• Assess technology, IT governance and cyber risk areas across client environments.
• Perform risk assessments from cyber security, business continuity and privacy perspectives.
• Lead end-to-end information security and cyber security initiatives for organizations.
• Work on data privacy program elements including privacy framework review against GDPR.

Skills

Information security

Risk assessment

Governance

Privacy

Education

ISO 42000

CISA

CISSP

Tools

NIST Cybersecurity Framework

GDPR compliance

Job description

About Company:

BDO is a global network of professional services firms with a presence in over 166 countries, revenue of over USD 14 billion, and experience of over 60 years. Its a leading service provider for the mid-markets with client service at its heart.

About Cyber:

BDO India cyber security practice is one of the fastest growing areas of the business with significant ambition for the future through additional recruitment and acquisition. As part of our cyber team / tech risk you will be managing teams and projects delivering advisory and technical support to help our clients to improve their information / cyber security posture and respond to the dynamic nature of technology risks / cyber security threats.

You will provide security domain expertise and utilise your business insight to work closely with our clients to advise, design, build and deploy pragmatic security solutions that will provide real and tangible benefits to protect their organizations. Furthermore, often carryout out IT Risk Assessments in line with industry "better" practices (NIST / ISF / Cloud Security / etc.), regulatory mandates (RBI / IRDAI), and various compliance standards focusing on data security, data privacy, etc.

Qualification:

• 4-7 Years of relevant experience in implementing ISMS, BCMS, Data Privacy projects.
• Preferred certifications – ISO 42000, CISA, CISSP

Key Responsibilities:

• Candidate should have exposure to design, development, implementation, and maintenance information security framework aligned to framework like ISO 42000.
• Candidate should have key understanding on technology, IT and governance aspects from Cyber Security perspective
• Candidate should have understood on performing gap assessment on organizations Cyber security landscape primarily to prevent them from cyber security threats.
• Candidate should have managed end-to-end Information security, cyber security for its organizations.
• Experience in performing the risk assessment from Cyber Security, Business Continuity and Privacy perspective
• Experience on Data Privacy including design/development and review of privacy framework aligned with GDPR requirements and GAPP framework