Specialist I - Information Security

5 - 7 Years
1 Opening
Trivandrum

Role Proficiency:

With strong knowledge of various applicable compliance standards independently handle internal/external compliance audits and VAPT/Red Teaming assignments. Involve more in the risk assessment and remediations. Effectively communicate with customer to understand the requirements and clearly convey the requirements to team. Handle the assigned tasks with minimal supervision

Outcomes:

Measures of Outcomes:

Outputs Expected:

Documentation:

Process:

Monitoring:

Training or certifications:

Skill Examples:

Knowledge Examples:

• Should have a strong understanding of concepts of Information Security Business Continuity and Data Privacy VAPT Red Teaming and various compliance standards.
  • Knowledge on ISO and other Compliance standards efficient to evaluate the security controls.

  • Knowledge on ISO 22301/27001/9001/27701 Risk Management incident management awareness activities customer assurance etc.

  • Knowledge on standard SDLC and project management life cycles.

  • Knowledge on the operations of various functional units like HR REFM IT Finance etc. and units involved in IT Asset lifecycle management.

  • Expert on security testing standards like OWASP Top 10 SANS 25 etc.

  • Good at OWASP cheat sheets and other security frameworks.

  • Expert on Linux commands.

  • Expert on Scripting Languages like Shell Script Python etc.

  • Development and Testing knowledge would an added advantage.

  • Hands on experience in RSA Archer Postman Burp Suite Nessus Nmap Genymotion MobSF Drozer etc.

  • Good to have Certifications like ISO 27001/22301/9001/27701 Lead Auditor/Implementor CISA CRISC SSCP ECSA (Practical) ECES CHFI OSEE etc.
  
  
  Additional Comments:

  UST is looking for Information Security Analyst with below requirements, Operational Support: o Coordinate with technology factory teams for assessment as per BAU process o Work with Technology Asset Owners (TAOs) to assess and implement relevant BAU process for Control Factory Candidates o Perform Assessments to determine security risks/ non-compliance as per the SOP manuals o Work with the team concerned and follow through remediation o Tracking and progress reporting o Perform periodic assessments to ensure compliance proactively Skill Set Requirements: • Role: Control Factory - Information Security Analyst • Skills & Background: o Minimum 2-3 years of relevant industry experience in any technology risk management (TRM), IT audit and/or cyber/information security functions o Ability to understand and operate documented process for IT compliance, audit and regulatory requests o Knowhow and understanding in one or more areas of technology risk management principles, internal control concepts, cyber/information security controls, and industry frameworks o Follow documented process to maintain BAU operations o Communication Results to stakeholders o Analyze Deviations and prepare remediation plan along the documented procedures o Be able to understand controls, develop inventory, assess applications against controls o Be able to work with stakeholders in remediation activities o Ability to manage JIRA workflow tickets for BAU process o Prepare & maintain knowledge base in Confluence/Collaborate o Identify areas of automation/innovation and efficiencies to enhance the BAU operation and stakeholder experience o Functional knowledge of operating systems (Windows/Unix), databases, networks and components like system IDs, system resources, firewalls, LDAP, AD, Cloud o Functional knowledge of applications (authentication, authorization, interfaces, APIs), logging and monitoring o Functional knowledge of application design and architecture o Functional knowledge of application criticality, availability and data classification o Able to learn new skills with training and self-study o Any relevant experience in Project Management is desirable. • Tools o JIRA, Confluence, ServiceNow and/ or Archer. o MS Office (Word/Excel/Visio), PDF and PowerPoint. • Education and Certifications o Degree or diploma in IT or technology stream o Any industry recognized IT certifications (Microsoft, Cloud, IT Security etc)

Cyber Security,JIRA,Servicenow