Deputy Chief/Information Security Officer (5-8 yrs)

Job Description :

- Develop, implement, and monitor a strategic, comprehensive enterprise information security and IT risk management program to ensure that the integrity, confidentiality, and availability of information is owned, controlled / processed by the organization.

- Manage the information security in the organization, consisting of direct reports and indirect reports (such as individuals in business continuity and IT operations). This includes hiring, training, staff development, performance management and annual performance reviews.

- Facilitate information security governance through the implementation of a hierarchical governance program, including the formation of an information security steering committee or advisory board.

- Develop, maintain, and publish up-to-date information security policies, standards, and guidelines. Oversee the approval, training, and dissemination of security policies and practices.

- Create, communicate, and implement a risk-based process for vendor risk management, including the assessment and treatment for risks that may result from partners, consultants, and other service providers.

- Create and manage information security and risk management awareness training programs for all employees, contractors, and approved system users.

- Provide regular reporting on the status of the information security program to enterprise risk teams, senior business leaders and the board of directors as part of a strategic enterprise risk management program.

- Create a framework for roles and responsibilities with regards to information ownership, classification, accountability, and protection.

- Develop and oversee effective disaster recovery policies and standards to align with enterprise business continuity management program goals. Ensure that business-critical services are recovered in the event of a security event. Provide direction, support, and in-house consulting in these areas.

Compulsory Certification (any one of these) :

- Compliance Officers-Brokers-Module

- Information Security Auditor Module

- Certified Ethical Hacker

- Red Hat Certified Engineer

- Certified Information Systems Security Professional

- Computer Hacking Forensic Investigator

Optional :

- Certified Information Security Auditor

- Certified Information Security Manager