Manager - Information Security

Infosys; Pune District; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

Infosys is seeking an experienced professional in Information Security Governance with 6-7 years of industry experience. The candidate will have a robust understanding of risk management, security policies, and compliance measures.

The ideal individual must possess a Bachelor's degree in Engineering and relevant certifications like CISSP or ISO 27001 Lead Auditor. Strong communication, analytical, and project management skills are essential for this role.

Qualifications

• At least 6-7 years of experience in Information Security Governance, risk and compliance.
• Strong analytical, troubleshooting and problem-solving skills.
• Excellent communication and collaboration skills.

Responsibilities

• Manage information security governance, risk, and compliance management.
• Implement industry standards like ISO 27001:2013 and PCI DSS.
• Act as an individual contributor while leading projects.

Skills

Information Security Governance

Risk Management

Compliance Management

Security Policy Implementation

ISO 27001:2013

CISSP

Project Management

Strong verbal and written communication

Education

Bachelor of Engineering or equivalent

CISSP, CISM, CISA or ISO 27001 Lead Auditor

Job description

Educational Requirements

Bachelor of Engineering

Service Line

Information Security Group

Responsibilities

• The candidate shall have at least 6-7 years experience in Information Security Governance, risk and compliance management with strong data and network security concepts.
• The candidate shall have vast experience in the areas of Risk Management, Governance, Compliance, Security policy and Metrics.
• The candidate should possess excellent technical, analytical, troubleshooting and problem solving skills.
• The candidate is expected to work as an individual contributor and shall have excellent communication and collaboration skills.
• The candidate shall possess thorough understanding and have experience in implementation of ISO 27001:2013, SSAE 18 SOC 1 SOC 2, PCI DSS, HIPAA other industry recommended standards and regulations.
• The candidate shall have strong technical understanding of Information Security.

Additional Responsibilities

• Self-starter, positive mentality and a go getter attitude mandatory
• Strong verbal and written communications skills mandatory, including creative writing skills
• Strong people and negotiation skills mandatory
• Quick learner, a researching mentality and ability to adapt to and meet demands of a fast changing environment
• Strategic thinking and project management skills

Technical and Professional Requirements

• Engineering Graduate or equivalent with 6 years of experience/ Post Graduate with 5 years of experience
• The candidate shall hold certifications like CISSP, CISM, CISA or ISO 27001 Lead Auditor

Preferred Skills

• Domain->Infrastructure-Information Security Management->ISO 27001 Audit
• Implementation