Description

You will analyze and evaluate the effectiveness of information security requirement implementations within large-scale enterprise systems.

Responsibilities

• Ensure compliance with corporate information security policies and support the maintenance of cybersecurity procedures and guidelines.
• Identify, document, and monitor risk register items, KPI/KRI, and security control efficacy.
• Define potential business impacts on critical infrastructure and apply effective mitigation strategies.
• Provide security requirements to internal partners and external third-party providers.
• Detect security weaknesses and develop technical solutions to automate business processes for increased compliance.

Required Skills

• 3+ years of experience in the information security domain within the IT industry.
• Practical working experience with control frameworks including ISO 27001, ISO 27701, NIST 800-53, NIST CSF, HIPAA, and DPDPA.
• Knowledge of security functions including Incident Management, Change Management, Identity and Access Management, and Risk Management.
• Understanding of Cloud Security, Vendor Security Risk Management, Physical Security, and BCP.
• Ability to communicate technical risks to IT stakeholders, business owners, and executive managers.
• Bachelor’s degree in Computer Science, Information Systems, or a related field.
• Strong organizational skills with the ability to prioritize multiple projects and tasks.

Key Skills

Education

Bachelor's Degree