Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
- Gratuity calculator
  
  Check your gratuity amount
- HRA calculator
  
  Check how much of your HRA is tax-free
- Salary hike calculator
  
  Check your salary hike
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 2K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

For Employers

Add office photos

Employer? Claim Account for FREE

Cerillion Technologies

Compare

3.8

based on 27 Reviews

1 Cerillion Technologies Information Security Officer Job

Information Security Officer

Cerillion Technologies

3.8

based on 27 Reviews

2-4 years

Kolkata, Mumbai, New Delhi + 4 more

1 vacancy

Information Security Officer

Cerillion Technologies

posted 6mon ago

Job Role Insights

Flexible timing

Key skills for the job

Quality Assurance Auditing Analytical Chemistry Information Security RFP ISO 27001 Lead Auditor

+ 3 more

Job Description

To perform the Gap assessment of existing Cerillion controls against ISO 27001 Annexure controls and guide function POCs to bridge those gaps.

Identify the cost-effective alternatives to ISO 27001 Annexure control and look after the technical specification and implementation.

Information Security Risk assessment for valuable assets based on NIST SP 800-30, understanding of ISO 27001:2005 and ISO 27001:2013 versions.

BCP and DR planning and coordination, help the function owner to conduct the BCP test and collect results to perform analysis.

Perform Internal audits/Compliance checks to assess the adherence to ISO 27001, ISO 9001 & GDPR.

Perform the audit findings analysis to target the week process area and draft the action plan.

Perform Network VA scans with the help of Nessus tool and report vulnerabilities to Infrastructure team.

Take an ownership of control assurance and make sure all the vulnerabilities are closed, none of the threats are exposed.

Research, develop, implement, test and review Cerillion s information security in order to protect information and prevent unauthorized access to Cerillion internal systems.

Data protection officer experience & knowledge about the GDPR regulations, DPO certification will be value added.

To update first response to the customer RFP for InfoSec questionnaire, based upon the information security at Cerillion.

Understanding and knowledge about ISO 9001:2015, PCI DSS, Cyber Essentials plus.

Hands on experience on Cloud Security practices such as NCSC Cloud Security Principles for IaaS, PaaS and SaaS.

Constant systems review in order to identify potential security weaknesses, recommend improvements to amend vulnerabilities, implement changes and document upgrades.

Access Control Matrix (ACM) Review of actuals against the planned on Quarterly basis for different designations.

Coordinate with external auditing bodies/external auditor to perform the certification and Surveillance audits.

What you ll bring to the role:

5+ years of experience as an Information Security Officer.
Experience working on Control implementation and Control assurance.
Knowledge about ISO 27001:2013 standard
Strong analytical, interpersonal, and problem-solving skills.

Education

Bachelor s or master s degree, or equivalent in Business Administration or related discipline.
ISO 27001:2013 Certified Auditor/Lead auditor
ISO 9001:20015 Certified auditor/Lead Auditor
Certified Data Protection Officer (GDPR)
Implementation Certificate