INFSEC Specialist

Role Description

You will be part of a Control Governance team, within Information Security & Production Services (ISPS) division under a larger Chief Security Office (CSO) organization.

This team is responsible to perform governance activities on all the ISPS owned Controls and related tasks, including compliance, overall ratings, collecting evidence from de-central apps, etc. This team is responsible to identify and highlight compliance gaps.

Application compliance gets validated against the control statement in the IS Control Policy and Implementation Guidelines. It requires you to have strong analytical skills and knowledge of Identity & Access Lifecycle.

Your responsibility includes assessment of risks of non-compliant control(s). You should propose remediation activities and get them finalised with the Control Owners. The remediation could be at coverage level as well.

Your key responsibilities

• Co-ordinate with Control Framework team to align controls with the control objectives.
• Co-ordinate with CSO Policy Office to get the control statement changes implemented.
• Effectively manage requests to link ISPS controls to the non-ISPS Audit Findings
• To work with Control Workbench team to incorporate control implementation guidance.
• Drive the team towards meeting the objectives.
• Accountable for process planning, execution, risk management, and achievement of the targets set for delivery of services.
• Responsible for the service delivery within the agreed level of quality and timeframe.
• Contribute significantly to the continuous improvement of processes with a focus on increasing automation.
• Provide support on internal and external audits.
• Tool / Database development for process optimization and reporting.

Your skills and experience

• Should have successfully completed a degree, relevant professional experience.
• Strong Governance skills
• Problem-solving skills be able to provide resolution options.
• Be able to work independently with minimal inter-action from seniors.
• Strong knowledge over Identity & Access Management (IAM) area
• Should have hands on experience over Excel macros, Power BI, and JAVA.
• Experience in working with virtual teams and matrix organizations across different time zones.