35 Job openings found

We are seeking a seasoned Information Security professional who has expertise in GRC with over 8+ years of progressive experience across data security, access management, IT security, network security, IT risk management, and compliance with standards such as ISO 27001, HIPAA, GDPR, NIST. This individual will lead GRC efforts, ensuring ...

-----JOB DESCRIPTION--- Act as the main point of contact for the design and deployment of the IT Security GRCframework and work with Very Senior IT leadership (CTO, IT Head)* Partner with all team members in the IT head's function to build/govern/sustain /improve anintegrated end-to-end security GRC framework to provide a "one-stop ...

Profile summary:The Manager (Information Systems and Security) is responsible for overall ‘InformationTechnology Services (ITS) function and in defining, implementing and documenting relevantprocesses, procedures and standards. This role will be in charge of establishing and maintainingan organisation wide information systems, infrastructure, and security, management program toensure that information assets are well ...

 Discuss with Business & IT on new process / system / activity before Onboarding/ Go-Live Conduct risk assessments to identify information security risks Propose controls to business / IT and / or work with business to plan riskmitigation Prepare Risk Assessment & Recommended Control Report Follow-ups for mitigation of ...

We are having an urgent opening for the position of Manager/Dy Manager–Cyber Security & IT Compliance for a reputed company in the Kolkata location.   Education : BE/B.Tech/MCA or Master Degree inrelated fieldRelevant Cyber security certificationsReporting structure :Reports to Head of the departmentBackground & Experience: 7-10 years of work experience in implementation and managing Cyber Security in ...

To manage and oversee the information security of TCHFL, inclusion its systems and data. Assure that information created, acquired or maintained by TCHFL and its authorized users, is in accordance with its intended purpose and complies with statutory and regulatory requirements regarding information access, security and privacy in order to ...

Lead company to SOC2/ISO 27001 certification; Develop and maintain information security policies; Design and implement information security policy education, training, and awareness programs; Establish security risk matrix and framework; select security solutions to address security controls for enterprise landscape; Partner with key business and IT leaders to develop security policies, standards, guidelines, and procedures ...

* Develop and maintain a comprehensive security architecture roadmap aligned withbusiness objectives and regulatory requirements.* Conduct thorough security risk assessments for business applications (on-premises, cloudhosted) to identify potential threats and weaknesses and recommend mitigation measures.* Conduct thorough security risk assessments for APIs to identify potential threats andweaknesses.*Conduct threat modelling for ...

Perform assessment of IT and cybersecurity policies, standards and otherdocumentation Identify gaps in policy, process and standard implementation Conduct discussions, take leadership and drive closure of identified open issuesin assessments Liaise with IT, Infra and business teams as required to drive Information andcybersecurity projects Release periodic dashboards\reports  Experience required for ...

Help define consistent Secure Software Development Lifecycle practices Ensure end-to-end security of Enterprise apps Improve secure coding practices, application security requirements, automation, training, and metrics Integrate threat modeling practices into the Software Development Lifecycle Help build secure products and standards around emerging technologies and using existing standards and security practices Perform Security Architecture and Low ...