Area Manager Cyber Security

Job Description

Role description a.        Providing assurance to the Audit Committee (AC) of Board of Directors (BOD), the CEO & MD and the Senior Management, on control adequacy and effectiveness on Cyber Posture – internal & external threats / Cloud Computing / IT Infrastructure / Data Security / Application Security / Social Engineering / Governance & Risk Management for uninterrupted business operations.   Executing audits, advisory, and other special projects in accordance with the approved audit plan. Auditor shall undertake reviews of the organization’s cyber threats, cloud infrastructure, Vulnerability Assessment & Penetration Testing, processes and controls to protect its intellectual property, using industry standards as a guide, and provide recommendations for improvements. Other details ·     Mandatory : BE, B-Tech, BSc (Engineering), ME/MTech, MBA/PGDM, MCA, MSc (Maths, Statistics or Physics) ·     Preferred : Exposure to information security and various standards in the form of project experience of one semester or completion of two related courses as a part of the curriculum. ·      Preferred : CISA / CEH / CISSP a.      Strong knowledge and experience in domains covering - Vulnerability assessment and penetration testing (VAPT), Risk management, Business continuity, Access and authorization, Web application security, Threat detection (SOC, NOC), Ethical Hacking, Social Engineering, Phishing simulation (email, CH, attachment) b.      Exposure on performing vulnerability assessment and penetration testing (black box) including red teaming c.       Information systems industry and best practices in network, application and hardware platform security d.      Audit and assessment methodologies, procedures and best practices that relate to information networks, systems, and applications Risk Management, security program policies, processes, standards, requirements and procedures and various supporting security technologies. Desirable : Understanding of NIST / ISO 27001 / CIS framework