Information Security Officer

Experience:- 5+ years

Location:- Bangalore

Responsibilities:

Maintain and update information security related compliances such as ISO 27001, GDPR, SOC 2 ,, PCIDSS, RBI SAR on PAPG and DL

Conduct periodic risk assessments and internal audits and vendor risk assessments

Maintain compliance related documents across all scoped functions; Provide continuous support to the teams in their compliance journey.

Perform ongoing refactoring of implemented controls.

Liaise closely with the IT and Engineering team to implement best in class information/data security/privacy controls.

Identify opportunities to adopt innovative technologies and best practices.

Be the information security SPOC for our Regulatory Body ( RBI) external banking clients for cyber security related queries and closure.

You should be able to prepare detailed data flow diagrams and documents for both clients and internal

Addressed and remediated audit findings through process improvements, policy updates, and technical controls to ensure compliance and reduce risk

Build a team of security officers to dedicatedly work for each of our banking clients for maintaining compliance and supporting banks queries

Requirements:

5+ years of experience in implementation and maintenance of information security related compliances.

Excellent understanding of IT , SDLC ,Devops processes.

Develops and delivers security awareness training and conducts phishing simulations to reduce user risk

Very good understanding of cloud architecture/technologies like kubernetes, docker, infrastructure as a code etc is a plus.

Understanding of cloud platforms like AWS is a must. You should be able to communicate efficiently with devops teams.

Should be proficient conducting internal audits.

Understanding of security engineering ( VAPT, devsecops etc ) and tools CSPM,DLP,WAF,EDR,SIEM,ASM ) is required.

Should be able to lias with security engineering teams, vendors ,incident response teams for smooth implementation of compliances