Deputy General Manager- Information Security Pune

Job Description:

• Designated Information Security Head for the Organization
• Ensuring strategic alignment of information security in support of business objectives
• Direct and support organization in protecting its information assets
• Lead and mentor corporate Information Security Team
• Responsible to establish, implement and improve Information and Cyber Security
framework for the organization, ISO 27001 Implementation and Sustenance experience
is must
• Well versed with RBI Cyber Security Framework and security related guidelines
• Periodically apprise the Sr. Leadership on Information Security posture of the
organization, highlight challenges, risk and improvement areas
• Lead in the development/adoption and enforcement of Information Security policies,
procedures and standards
• Delegation of information security deliverables to Team Lead and Process Owners
and ensuring completion
• Providing relevant inputs to the Sr. Leadership with respect to audit observations,
information security incidents, implementation guidance, risk assessment, risk
treatment and all related activities
• Proposing new initiatives in Information Security such as technology and process
initiatives with an aim to strengthen the Information Security posture of the
organization
• Ensuring periodic review of Information Security Policies, Risk Assessments and other
ISMS documents
• Data loss prevention strategy design and sustenance
• Privileged Access Management Compliance
• Overseeing various information security and regulatory audits and CAPA tracking
• Tracking and Closure of Information Security Incidents, timely reporting to
government authorities, regulatory and Sr. Leadership on Incidents/Threats etc. and
ensuring resolution within accepted timelines
• Managing Security Exceptions
• Governing SOC Team
• BCP - Design and Testing
• Design and deliver Information Security Trainings and Awareness Initiatives
• Ensuring completion of VAPT, Red Team assessment, Source Code Review, Vendor
Risk Assessment and relevant CAPA
• Reporting ISMS Measurement Metrics to the Management
• Evaluate and recommend security products/service, perform due diligence
• Hosting Various InfoSec Security Review meetings
• Presenting Annual Operations Plan to the management
• Budget and Resource forecasting and management
• Vendor Management - Product/Service Procurement, Budget Tracking and
Governance
• Working with group companies' InfoSec units for product/service evaluation,
technical analysis, rollout of new initiatives, cyber threat intelligence etc.