Information Security Policy Operation

Company Overview

Samsung Electronics is a global leader in consumer electronics, semiconductors, telecommunications, and digital media technologies. The company was founded in 1969, and has since grown into a multinational conglomerate with over 287,000 employees in 74 countries. It has been ranked number 1 by Forbes in their Worlds Best Employers list for the third consecutive year.

Roles and Responsibilities

• Work with functional and core support groups throughout the organization to meet information security policy requirements
• Support periodic internal audits and manage external audits with no major/minor non-conformances
• Review and draft periodic updates to Security Policies, Processes, Guidelines, Standard Operating Procedures
• Liaise and co-ordinate with a network of information security ambassadors across the organization for information security awareness and compliance
• Investigate security incidents and perform root cause analysis
• Undertake information security awareness, training and communication programs for employees
• Assist in information security risk assessments and new control validation/selection activities
• Manage security systems like DLP, SIEM, EDR, DRM, End point Encryption, WIPS, etc.
• Assist in POC and implementation of new security products and solutions in line with Security strategy of the organization

Skills and Experience Required

• 4-5 years of work experience in information security compliance/assurance/operations or related functions (such as IT audit and IT Risk Management)
• Information Security Consulting & Auditing Experience will be given preference
• Experience of at least 1-2 Information Security Management System implementation life Cycles

Technical Skills

• Information Security audit and compliance checks to assess the adequacy of security controls:
  Security Software Policy & Compliance checks, Firewall & Proxy Configuration Audits, Wireless Infrastructure Audits, Cloud Security Assessments, Personal Data Protection Assessments, Security Exception Approvals, Remote Access Checks, Security Exception usage checks, Malware Mock Drills
• Information Security Metrics and Dashboard Reporting to include:

Security software compliance, Anti-malware compliance, Patch compliance, Security
exceptions, Security incidents and violations User account validation, Vulnerability
Assessments on Servers, Network & PCs and ensure timely remediation of vulnerabilities

• Monitoring & Management of Information Leakage Management System, SIEM System, End point Encryption system
• Monitoring and auditing firewalls, proxy, server security, end point security and other security measures
• Working knowledge of data privacy regulations across the world like GDPR, CCPA is an an added advantage
• Proficiency in data analysis and reporting with working knowledge of advanced excel is a must