Manager - Information Security

Infosys; Maharashtra; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Infosys is seeking an experienced Information Security Governance professional in India, for candidates with 6 years (engineering) or 5 years (PG) and security certifications.

The role requires deep knowledge of risk and compliance, ISO 27001, SOC 1/2, PCI DSS, HIPAA, and strong analytical and communication skills.

You will work as an individual contributor, driving governance programs, security policies, and metrics in a fast-changing environment.

Qualifications

• Engineering or postgraduate with security certifications.
• CISSP, CISM, CISA or ISO 27001 Lead Auditor are expected.
• 6–7 years of experience in information security governance, risk and compliance.
• Strong communication, analytical and problem-solving skills.
• Experience with ISO 27001:2013, SSAE 18 SOC 1 & SOC 2, PCI DSS, HIPAA & other standards.

Skills

Governance

Risk management

Compliance management

Security policy & metrics

Strong communication

Collaboration

Strategic thinking

Project management

Education

Engineering Graduate or equivalent

Post Graduate

Job description

• Engineering Graduate or equivalent with 6 years of experience/ Post Graduate with 5 years of experience
• The candidate shall hold certifications like CISSP, CISM, CISA or ISO 27001 Lead Auditor
• The candidate shall have at least 6-7 years’ experience in Information Security Governance, risk and compliance management with strong data and network security concepts. The candidate shall have vast experience in the areas of Risk Management, Governance, Compliance, Security policy and Metrics.
• The candidate should possess excellent technical, analytical, troubleshooting and problem solving skills. The candidate is expected to work as an individual contributor and shall have excellent communication and collaboration skills.
• The candidate shall possess thorough understanding and have experience in implementation of ISO 27001:2013, SSAE 18 SOC 1 & SOC 2, PCI DSS, HIPAA & other industry recommended standards and regulations.
• The candidate shall have strong technical understanding of Information Security
• Self-starter, positive mentality and a go getter attitude mandatory
• Strong verbal and written communications skills mandatory, including creative writing skills
• Strong people and negotiation skills mandatory
• Quick learner, a researching mentality and ability to adapt to and meet demands of a fast-changing environment
• Strategic thinking and project management skills