Senior Analyst

Summary:

1. Perform the periodic Internal reviews and compliance check of IFTAS Information System.

2. Track the non-compliance / findings for closure.

Responsibilities:

1. Perform technical review of Information Systems which includes system hardening, access controls, privilege access, exceptional access granted, identify obsolete configuration, etc. Post Technical review recommend the cyber security controls as per Information Security Policy.

2. Perform the Risk assessment of the new projects/requirement to ensure required CIA control are implemented as per Information Security policy

3. Support the maintenance of ISO 27001 Certification

4. Conduct the periodic review of Firewall, Proxy, IPS, WAF, DAM and other network security Solutions.

5. Review the Data security controls.

6. Follow-up with departments for closure of non-compliance and audit findings.

7. Perform the compliance check for IT Assets as per IFTAS Policy and Standard.

8. Monitor the Patching compliance and Antivirus/EDR compliance.

9. Create SOP documents, Reports and maintain various trackers

Education: Any graduate. CISA, CISM or ISO 27001 Certification is preferred.

Experience: Candidate must have 4-8 years of total experience with 3-5 years of relevant experience.

Knowledge:

Candidate should have:

1. Knowledge of various Information Security Controls.

2. Knowledge on Endpoint Security Control

3. ISO 27001 Implementation

4. Basic Knowledge of Cloud security and VMware ESXi or NSX-T environment security will be a plus

Required skills:

IT Risk Management

IT Compliance

ISO 27001