Tech Risk

Cloudxtreme; Kolkata District, Chennai District, Bengaluru; Hybrid; INR 2,500,000 - 4,500,000; Full time

Job summary

Cloudxtreme in Kolkata seeks an experienced information security leader with 8+ years in the field and at least 3+ years in technology risk management. The role requires deep knowledge of industry standards and hands-on ability to drive risk programs.

The candidate should demonstrate strong communication skills and the ability to collaborate with stakeholders to build roadmaps for cyber security initiatives across multiple domains.

Qualifications

• Bachelor's degree in information technology or related field.
• 8+ years information security experience with 3+ years in technology risk management.
• Excellent verbal and written communication.
• Understanding of industry standards and frameworks (COBIT, COSO, ISO 27001, PCI, NIST).
• Experience implementing and operationalizing technology risk management programs.
• Understanding of security requirements, contributions to security design and hands-on implementation of multiple security technologies and capabilities.
• Hands on experience working with stakeholders in identifying, prioritizing and developing plans and roadmaps for cyber security programs.
• Broad domain knowledge across cyber security domains including cyber risk strategy, program management, operations, security architecture, data protection, and cloud security.

Skills

Communication

Stakeholder collaboration

Cyber risk strategy

Security design

Education

Bachelor's degree in IT or related field

B.E./B.Tech + MBA (Preferred)

CISSP / CRISC (or equivalent)

Job description

Required:

• Bachelors degree in information technology or related field
• 8+ years information security experience with 3+ years of experience in technology risk management
• Excellent verbal and written communication
• Understanding and knowledge of industry standards and industry frameworks (e.g., COBIT, COSO, ISO 27001, PCI, NIST)
• Experience of implementing and operationalizing technology risk management programs.
• Understanding of security requirements, contributions to security design and hands-on implementation of multiple security technologies and capabilities
• Hands on experience working with stakeholders in identifying, prioritizing and developing plans and roadmaps for cyber security programs
• Broad domain knowledge and strong understanding of three or more cyber security domains including (but not limited to):
• Cyber risk strategy
• Cyber risk program management and delivery
• Cyber security operations
• Security architecture
• Data protection
• Application security/SDLC
• Third party risk management
• Cloud security
• Cyber Threat Intelligence
• Security Operations Center
• Incident Response
• Cyber Resilience

Preferred:

• B.E. / B.Tech + MBA (Preferred)
• CISSP / CRISC (or equivalent