Documentation Executive

Job description

Designation : Compliance executive

Solid knowledge of information security principles and practices.
Working experience with intrusion detection systems
Understanding of advanced security protocols and standards
Evaluate and develop approach to solutions
Proactively assesses potential items of risk and opportunities of vulnerability in the network
Experience with security practices of Intranet and Extranet
Protects system by defining access privileges, control structures, and resources.
Recognizes problems by identifying abnormalities; reporting violations.
Implements security improvements by assessing current situation; evaluating trends; anticipating requirements.
Determines security violations and inefficiencies by conducting periodic audits.
Upgrades system by implementing and maintaining security controls.
Keeps users informed by preparing performance reports; communicating system status.
Maintains quality service by following organization standards.
Maintains technical knowledge by attending educational workshops; reviewing publications.
Contributes to team effort by accomplishing related results as needed.
• Liaison with the department leads and managers and provide direction to related governance functions(such as Physical Security/Facilities, Risk Management, IT, HR, Legal and Compliance) throughout the organization as necessary, on information security matters such as routine security activities plus emerging security risks and control technologies.

• Assist in designing, implementation, operation and maintenance of the Information Security Management System based on the ISO / ISMS Process, including certification wherever applicable
  
• Routine line management and leadership of staff within the Information Security Management function
  
• Prepare SOP and guide the process towards implementation of necessary information security policies, standards, procedures and guidelines, in conjunction with the Security Committee
  
• Document and guide on operation related compliance monitoring and improvement activities to ensure compliance both with internal security policies etc. and applicable laws and regulations
  
• Prepare documents, SOPs and implement suitable information security awareness, training and educational activities
  
• Guide the operations function on information security risk assessments and controls selection activities