Finova Capital

Department: Information Security

Reports To: Chief Information Security Officer (CISO)

Location: Jaipur

Employment Type: Full-Time

Job Summary:

- The CISO Assistant will work closely with the Chief Information Security Officer to support the development, implementation, and management of the organization's security programs.

- This role will assist in monitoring security operations, tracking compliance, managing security projects, and coordinating across teams to ensure alignment with the organization's security policies and regulatory requirements.

Key Responsibilities:

Support Security Operations:

- Assist the CISO in overseeing day-to-day security operations.

- Help monitor and respond to cybersecurity incidents and vulnerabilities.

- Work with IT and security teams to ensure the implementation of security measures.

Compliance and Risk Management:

- Help track compliance with regulatory requirements (e.G., GDPR, HIPAA, PCI-DSS).

- Assist in risk assessments, audits, and security reviews to identify gaps and recommend solutions.

- Maintain records of compliance activities and report status to the CISO.

Security Policy Management:

- Assist in the development, maintenance, and enforcement of security policies, standards, and guidelines.

- Coordinate with various departments to ensure understanding and adherence to security policies.

- Assist in conducting training sessions on security policies and best practices for employees.

Incident Management:

- Help the CISO manage incident response processes, including documentation, coordination, and reporting.

- Monitor security logs and reports for potential security issues.

- Coordinate with internal and external stakeholders during a security incident.

Project Coordination:

- Assist in managing security projects, such as the implementation of new tools, systems, or security frameworks.

- Collaborate with IT, compliance, and legal teams to ensure security initiatives are aligned with organizational goals.

- Track progress and provide status updates on security projects to the CISO.

Vendor and Third-Party Management:

- Assist in managing relationships with security vendors and third-party service providers.

- Help review contracts and service level agreements (SLAs) to ensure vendors meet security requirements.

- Coordinate security assessments of third-party vendors and partners.

Reporting and Documentation:

- Help the CISO prepare security reports for the executive team, board members, and other stakeholders.

- Maintain documentation related to security incidents, risk assessments, audits, and compliance activities.

- Assist in preparing reports and presentations on security metrics and risk management.

Research and Stay Informed:

- Stay updated on the latest cybersecurity trends, tools, and best practices.

- Assist the CISO in evaluating new security technologies and solutions.

- Monitor developments in cybersecurity regulations and update policies accordingly.

Required Qualifications:

Education:

- Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field.

Experience:

- 2+ years of experience in information security or IT support roles.

- Experience with security frameworks such as NIST, ISO 27001, or CIS controls is a plus.

Certifications (Preferred):

- CompTIA Security+, CISSP, CISM, CEH - Certified Ethical Hacker, THM Pre-Security, Kali Linux Penetration Testing Pursuing CCNA- Cisco Certified Network Associate or other relevant certifications.

Skills and Competencies:

Technical Knowledge:

- Basic understanding of information security principles, cybersecurity threats, risk management, and regulatory requirements.

Communication Skills:

- Excellent verbal and written communication skills; able to prepare reports and present to Strong analytical skills with the ability to identify, assess, and provide recommendations for security-related challenges.

Project Management:

- Ability to manage multiple projects, prioritize tasks, and meet deadlines.

Attention to Detail:

- Strong attention to detail for tracking compliance, documentation, and reviewing security logs.

Team Collaboration:

- Ability to work collaboratively with IT, legal, compliance, and other teams.

Preferred Skills:

- Familiarity with security monitoring tools (e.g., SIEM systems).

- Experience with incident response processes and vulnerability management.

- Knowledge of cloud security and cybersecurity regulations