Senior Manager - Information Security (5-9 yrs)

We are hiring for Sr Manager InfoSec at leading organization in Insurance Domain

- Location- Thane

- Work Mode : Work from Office Only

Desired Profile :

- Experience of performing & handling complete TVM, Dev Sec Ops, plan from lead perspective

- Knowledge of IT Infrastructure and Applications / Information security / Cloud Security

- Sound knowledge of Office suite of applications (Excel, Word, PowerPoint).

- Excellent interpersonal & communication skills along with ability to influence and make major decisions.

Experience : 5 + Years

Training Required : CEH, ECSA, LPT, OSCP etc.

Preferred : GPEN

Good To Have :

- Relevant Trainings or Certifications like Dev Sec Ops, Cloud scanning & governance, end to end process review.

- TVM calendar 1. Complete ownership of TVM calendar

- Tracking & closures from multiple sources as per TVM calendar

- Cloud Security

- Go - Live Assessments

- Application Security Life cycle process/Dev Sec Ops (On Prem/Cloud)

- CASB/CSPM - Cloud Security configuration policies and incident management process

- WAF (existing & new integration, governance process)

- Ad hoc assessments (technical assessments like application integration, architecture review, guidelines for new requests etc.)

- Undertaking of new implementation projects pertaining to TVM framework.

- Ownership of security solutions/scanners

Key Result Areas :

- Monitor and assess the adequacy of information security so as to ensure appropriate logical security

- Plan and conduct IT Risk Assessment

- Review IT Security Program implementation.

- Review SDLC framework and its implementation

- Assist IT in the implementation of best practices in IT Security / Governance.

- Implementation of various risk management initiatives like information Classification, Record Retention and other best practice projects, frameworks and policies so as to have a standardized approach to various processes.

- Reinforce the implementation of information classification policy / record retention.

- Review the functional adequacy of the information classification policy / record retention policy

- Review and update Risk Policies

- Ensure Risk Policies Certification and testing for compliances to the policy

- Prepare Risk Review Committee pack for reporting to the Risk Review Committee.