Lead - Online Security Posture

Position

Grade

Shift

Location

Position Summary:

The Information Security Risk and Compliance lead is responsible for proposing, assessing and implementing various cybersecurity services in terms of risk management, ISO 27001, HIPAA, HITRUST. Need to have a strong understanding of security requirement in industry such healthcare, Pharma, patient services and life sciences.

• Lead in assessing cybersecurity posture and maturity for client based on requirements and pain areas. Recommending cybersecurity strategy and architecture based on client's pain areas and risk assessments.
• Lead in performing information security risk assessment, tracking and monitoring the risk remediation.
• Collaborate with internal department of client in addressing and remediating various identified information security risk.
• Present complex cybersecurity solutions to clients in a clear, concise, and engaging manner, translating technical jargon into understandable benefits.
• Design and propose customized security solutions that address the client's unique challenge.
• Define and document security metrics and dashboard to measure and monitor cybersecurity KRI and KPIs.
• Develop, Implement, and maintain control requirement basis standards such as ISO 27001, HIPAA, HITRUST.
• Review and update current information security policies and procedures.
• Create and oversee the implementation of new security and compliance policies and procedures.

Profile Description:

• Strong expertise in cybersecurity principles and best practices
• Thorough understanding of various security standards, framework, and certifications/attestations e.g., ISO 27001, HIPAA, HITRUST.
• Thorough understanding of various IT and Information security risk assessment framework/standards
• In-depth knowledge of various security tools and technologies
• In-depth understanding of various firewall and vulnerability assessment solutions
• Top-notch communication skills, both written and verbal, to deliver presentations and consult with diverse client.
• Excellent analytical and problem-solving skills.
• Ability to develop security standards and guidelines based on best practices and industry standards for existing and new technologies.
• Security certifications (e.g., CISSP, CISA) would be added advantage.
• Stay up to date on the latest cyber threats and vulnerabilities.
• Familiarity with common tech stacks
• Understanding of various virtualization tools like PowerBI, Tableau and tool like PowerShell, Python would be added advantage.
• Engineering in Computer Science, or relevant field