Information Security Lead

This is a remote position.

Job Description for Information Security Lead:

Roles and Responsibilities

• Monitor computer networks for security issues.
• Investigate security breaches and other cybersecurity incidents.
• Install security measures and operate software to protect systems and information

infrastructure, including firewalls and data encryption programs.

• Document security breaches and assess the damage they cause.
• Implement penetration testing along with ethical hacking.
• Fix detected vulnerabilities to maintain a high-security standard.
• Stay current on IT security trends and news.
• Develop company-wide best practices for IT security.
• Help colleagues install security software and understand information security

management.

• Research security enhancements and make recommendations to management.
• Stay up-to-date on information technology trends and security standards.
• Revise and analyse IT operations and systems, hardware configurations, physical

security and operating procedures across organization.

• Consult and comply with set controls, standards, policies and procedures while

carrying out IT activities.

• Search technology and reduce risks in every information security segment.
• Suggest measures to improve IT related procedures, operations, processes and

systems throughout organization.

• Suggest and execute IT technologies, strategies and policies to guard customer’s

information assets.

• Implement security risk analysis for current and new systems to find system

weaknesses or disclosures.

• Recommend solutions for explaining risks and reducing exposure areas.
• Prepare security program plans and execute IT controls, processes, audit tools,

interfaces and utilities for authentication.

• Perform as chief for audits and security aspects (ISO 27001).
• Support and provide consultancy for audit compliance actions.
• Implement periodic, on-demand project audits plus vulnerability analysis.
• Determine compliance through user accounts, application usage, system file and

outside scans.

• Perform independently in team implementing security and privacy engagements.
• Review client networks and applications.
• Compliance with industry standards such as ISO 27001, NIST-800-53, CIS

Benchmarks, SWIFT SCSF, etc.

·Supporting audits related to security

·Hands on ISO 27001.

·Experience of IAM.

• Experience with computer network penetration testing and techniques.
• Understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts.
• Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
• Understanding of patch management with the ability to deploy patches in a timely

manner while understanding business impact.

Requirements

Required Skills:

·Fluent ENGLISH, both verbal and spoken

• 5+ years of experience in information security or related field.

·Vulnerability Management full cycle

• Developing, implementing, and monitoring compliance with security baselines
• Security patch management full cycle for OS, databases and applications

·Security incident management full cycle

​

·Hands on ISO 27001.

·Experience of IAM.

• Experience with computer network penetration testing and techniques.
• Understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts.
• Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
• Understanding of patch management with the ability to deploy patches in a timely

manner while understanding business impact.

​

Originally posted on Himalayas