Information Security Specialist (5-8 yrs)

Information Security Architect

Location : Bangalore

Work Timings : 1:30 PM to 10:30 PM IST

Work Mode : Hybrid Work Policy

About ASCH Pro :

The Role ASCH Pro is searching for a talented Information Security Architect to join our growing team. In this role, you will be responsible for designing, implementing, and maintaining our information security program. You will work closely with cross-functional teams to ensure that our systems and data are secure.

Responsibilities :

- Design, implement, and maintain a comprehensive information security program

- Conduct security assessments and identify vulnerabilities

- Develop and implement security policies and procedures

- Stay up-to-date on the latest security threats and trends

- Communicate security risks and mitigation strategies to all levels of the organization

- Work with cross-functional teams to implement security solutions

- Oversee security testing and incident response activities

Minimum Qualifications :

- 5 years of experience in Information Security 5 years of experience in Network Security, Endpoint Security, Data Security, Cloud Security, Application Security, Security Testing, and/or a similar area of security

- Proven success delivering large, complex projects and programs

- Good grasp of enterprise cloud security solutions like CSPM, SASE, CASB, and DLP

- At least one or more of cloud vendor certifications : AWS Security Specialty, Microsoft Cybersecurity Architect, and/or Google Cloud Security Engineer CISSP, CISM, SABSA, TOGAF, or other related Information Security certifications

- Good understanding of security vulnerabilities and their mitigations

- Good understanding of security frameworks like NIST and ISO27001

- Familiarity with risk management methodologies, regulatory requirements (e.g., SOX, FedRAMP, PCI-DSS), privacy, and other information and data security requirements

- Strong communication skills with all levels of an organization

- The ability to communicate and express complex ideas in terms others can understand and convey technical security decisions in terms of business outcomes

- Some experience with enterprise security architecture and working as part of a cross-functional team to implement technology and security solutions

- Willingness to travel, approximately 20% domestically and internationally

Bonus Points :

- Experience in a cloud-based environment (AWS, Azure, GCP)

- Experience with security automation tools

- Experience with security orchestration and response (SOAR) platforms