Information Security - Senior Analyst

• Excellent knowledge and skills on Information Technology (IT), Information Security (IS) Information Security Risk aligned with ISO/IEC- 27001:2022 and ISO 31000 Standard requirements.
• Ability in articulating information security risks concept to the business and IT as per organization s risk management framework.
• Provide consulting services on Information security controls gap analysis and implementation, risk assessment, data privacy, security incidents and assessment to business and stakeholders.
• Conduct ISMS periodic internal audits and help the business and enabling functions to achieve compliance, sustenance and continual improvement on ISO 27001:2022 standard requirements, organizational security policies and customer s requirements.
• Conducting periodic Information security education and training workshops for employees to raise awareness on Information Security.
• Capability to communicate information security-related concepts to a broad range of technical and non-technical personnel.
• Support in defining, planning, designing and implementing an overall Information security management framework/process for the organization.
• Excellent communication skills to maintain effective relationships with service team leaders, functional and business groups at all levels.
• Analyze and determine risks to help clients to implement controls for risk mitigation.
• Review various security risk factors including problems with the physical security, IT security, Human Resource security, Data privacy, Business continuity of various locations/sites of the organization.
• Work with BU Account Managers and stakeholders on the response process to customer s risk assessments, evaluations, RFP questionnaires and contract reviews from Information security scope perspective.
• Assist in the investigation, resolution and tracking of information security incidents reported.
• Ability to develop and publish Information Security policies, procedures, standards and guidelines based on knowledge of best practices and compliance requirements.
• Perform Risk Assessments, Business Impact Analysis, Compliance Assessments, Privacy Assessment, Gap Analysis and Remediation, Threat and Vulnerability Assessments.

Skills, Experience & Qualification Requirements :

• Bachelor s degree preferably in IT/Computer Science field with minimum of 7+ years of overall experience in Information Security ISO 27001:2022 ISMS implementation, consulting and audits.
• Good knowledge and experience on key Information security domains and controls (like Access Control, Operations Security, Physical Security, Human resource security etc.) from ISO 27001:2022 standard.
• Working knowledge of other industry-standard risk, governance and Information/Cyber security standard methodologies like NIST.
• ISO 27001:2022 Lead Auditor certification (Preferable) / ISO 27001:2022 Internal Auditor, CISA (Certified Information Systems Auditor)
• Knowledge of current and emerging IT trends (Cloud computing) and associated security threats and risks.
• Should be a team player with strong analytical, positive outlook and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to prioritize, support and deliver on critical project deliverables and milestones.
• Passion for learning and excellent collaboration skills.
• Flexible to travel across locations/sites to drive Information security.