Information Security Expert - NHA(PMJAY) - Delhi

Information Security Expert

About the role

An Information Security (IS) Expert is responsible for ensuring that an organization's information systems, processes, and practices comply with relevant laws, regulations, industry standards, and internal policies related to cybersecurity and data protection.

Qualifications

B.E/B.TECH OR MCA from a reputed college university

Technical Experience

• Candidate should have minimum 10 years of overall IT experience post qualification completion
• 5 years of experience in information security or cyber security field.

Certificate Mandatory: Valid CISM OR CISSP certification.

Roles & Responsibilities:

• An industry recognized certification like ISO27001, AWS Security Specialty, Azure Security (AZ-500) is an added advantage
• Develop, implement, and maintain information security policies, standards, and procedures.
• Stay up to date with the latest security trends, technologies, and best practices.
• Should have experience in application security, including threat modelling, secure coding practices, and security testing methodologies.
• Strong understanding of common web application vulnerabilities (e.g., OWASP Top 10) and how to remediate them.
• Work closely with the development team during Web Application Security Assessment (WASA) and Vulnerability Assessment and Penetration Testing (VAPT).
• Promote security awareness and ensure the adoption of best practices across all departments.
• Provide guidance on security-related decisions.
• In-depth knowledge of IAM concepts, principles, and protocols, such as LDAP, SAML, OAuth, and OpenID Connect.
• Should have experience in infrastructure security, including network security, server hardening, and cloud security.
• Hands-on experience with security technologies such as firewalls, IDS/IPS, SIEM, and endpoint protection.
• Strong understanding of networking concepts, protocols, and architecture, including TCP/IP, DNS, DHCP,

VPNs, and VLANs.

• Experience with cloud platforms such as AWS, Azure, or GCP, including knowledge of security best practices and controls.
• Knowledge on GCC, STQC and Aadhaar Compliance
• Familiarity with compliance standards and frameworks such as ISO 27001, NIST SP 800-53, and CIS benchmarks.
• Excellent analytical and problem-solving skills, with the ability to assess complex security issues and recommend effective solutions.
• Strong communication skills, with the ability to effectively communicate technical concepts to nontechnical stakeholders.