Information Security Engineer

4 weeks ago


india Locus Full time

Information Security Engineer


We're looking for a 2-4 yrs experienced Information Security Engineer.


Responsibilities:


  • Define, implement, and maintain the Information Security Management System (ISMS) and Privacy Information Management System (PIMS).
  • Plan and execute periodic risk assessments. Work directly with the business units to facilitate risk assessment and risk management processes.
  • Define, Review and Maintain the organizational information security policies, processes, procedures and control framework to ensure it is adequate to address the emerging risks due to changing environment, technology and legal requirements.
  • Align customer and internal information security objectives to the ISMS and PIMS.
  • Monitor and fulfill client contractual (MSA) information security and privacy obligations.
  • Monitor and fulfill legal obligations related to protection of personal information across different jurisdictions like GDPR, CCPA.
  • Prepare metrics based periodic reports and dashboards with support from the stakeholder functions for management review.
  • Liaise with security vendors, suppliers, service providers and external resources for new security tools for improving security.
  • Lead the Information Security audits / assessments / remediation and present key risks to the management.
  • Perform the Third party Risk Assessment of Critical Vendors.
  • Conduct Information Security and Privacy awareness and training programs for the employees as part of their induction and regular awareness.
  • Oversee information security and privacy incident management process for incident reporting, containment, resolution and root cause analysis.
  • Plan and coordinate BCP and DR tests.
  • Setup guidelines for secure coding practices.
  • Recommend security and privacy controls based on people, process and technology approach and industry best practices.
  • Identifying solutions or writing automation scripts for solving regular tasks or optimizing processes.




Requirements:


  • Good understanding of information security compliance requirements like ISO27001, SOC2, CSA STAR and Privacy requirements like BS10012 & ISO27701.
  • Good understanding of legal obligations towards protection of personal information across different jurisdictions like GDPR, CCPA, etc.
  • Experience in creating and auditing security and privacy best practices and implementation of security and privacy principles across organization, to meet business goals along with customer and regulatory requirements.
  • Experience implementing security and privacy controls for cloud platforms like AWS, Azure.
  • Experienced in solving Audit and Regulatory Issues.
  • Experience in auditing MDM, SSO solutions.
  • Good at solving information security compliance challenges by recommending solutions and best practices.
  • Experience in writing automation scripts in any language to solve redundant tasks.



  • India Locus Full time

    Information Security Engineer We're looking for a 2-4 yrs experienced Information Security Engineer. Responsibilities: Define, implement, and maintain the Information Security Management System (ISMS) and Privacy Information Management System (PIMS). Plan and execute periodic risk assessments. Work directly with the business units to facilitate risk...


  • india TAC Security Full time

    Job Title: Senior Security Engineer - VAPT Location: Pune, India Company Description TAC Security is a global leader in vulnerability management that specializes in protecting Fortune 500 companies, leading enterprises, and governments worldwide. With its AI-based Vulnerability Management Platform ESOF (Enterprise Security in One Framework), TAC Security...


  • india Piramal Capital & Housing Finance Limited Full time

    QUALIFICATION: Graduate (BSc. IT, BE) with Information Security Certifications – CISSP EXPERIENCE: Candidate must have strong experience in Information Security Management system, Policy & procedures creation, implementation ISO27001 assessment – Specification for a framework of policies procedures that include all technical & operational controls...


  • India MicroStrategy Full time

    Ideal candidates will be located in Nagpur or within commutable distance, however remote candidates will be considered. Your Focus: Support the detection, monitoring and tracking of security vulnerabilities at the application, database, server, workstation and OS levels. Support AWS, Azure, and Google cloud operations in securing the public cloud...

  • Security Researcher

    6 days ago


    India Altered Security Full time

    We are looking for top Security Researchers (Remote) with demonstrable expertise to join our team of experts Altered Security is an information security startup with focus on edtech, hands-on learning and focused security assessments. It has offices in India and Singapore. We are experts in information security training, cyber ranges, online labs and...


  • India Gritstone Technologies Full time

    Information Security Specialist GRIT-JR Job Summary We are looking to hire a cyber security engineer or Specialist with an analytical mind and a detailed understanding of cybersecurity methodologies. Cyber security engineers are expected to have meticulous attention to detail, outstanding problem-solving skills, work comfortably under pressure, and...


  • india Gritstone Technologies Full time

    Jr. Information Security GRIT-JR0000252 Job Summary We are looking to hire a cyber security engineer or Specialist with an analytical mind and a detailed understanding of cybersecurity methodologies. Cyber security engineers are expected to have meticulous attention to detail, outstanding problem-solving skills, work comfortably under...


  • india Gritstone Technologies Full time

    Jr. Information Security GRIT-JR0000252 Job Summary We are looking to hire a cyber security engineer or Specialist with an analytical mind and a detailed understanding of cybersecurity methodologies. Cyber security engineers are expected to have meticulous attention to detail, outstanding problem-solving skills, work comfortably under...


  • india Gritstone Technologies Full time

    Information Security Specialist GRIT-JR0000247 Job Summary We are looking to hire a cyber security engineer or Specialist with an analytical mind and a detailed understanding of cybersecurity methodologies. Cyber security engineers are expected to have meticulous attention to detail, outstanding problem-solving skills, work comfortably...


  • India Nike Full time

    Rejoignez l'équipe NIKE, Inc. Loin de se contenter d'équiper les plus grands athlètes mondiaux, NIKE, Inc. explore les potentiels, abolit les frontières et repousse les limites du possible. L'entreprise recherche des personnes capables d'évoluer, de réfléchir, de rêver et de créer. L'épanouissement de sa culture repose sur son ouverture à la...


  • india Nike Full time

    Rejoignez l'équipe NIKE, Inc. Loin de se contenter d'équiper les plus grands athlètes mondiaux, NIKE, Inc. explore les potentiels, abolit les frontières et repousse les limites du possible. L'entreprise recherche des personnes capables d'évoluer, de réfléchir, de rêver et de créer. L'épanouissement de sa culture repose sur son ouverture à la...


  • india Security Lit Full time

    Job Description: Join the forefront of cybersecurity innovation at Security Lit! We're on the hunt for a dynamic Application Security (AppSec) Manager Lead to steer our Information Security Team. This pivotal role focuses on Vulnerability Assessment and Penetration Testing within the BFSI sector. You’ll be leading a spirited team spread across the UK,...


  • india Danfoss Full time

    Job Responsibilities Responsibilities for this position include, but are not limited to, the following. • Drives the continuous development of the risk management process.• Communication expert to different stakeholders across the organization• Supports the Security Governance of the ISMS• Support the Information Security Governance...


  • india Danfoss Full time

    Job Responsibilities Responsibilities for this position include, but are not limited to, the following. • Drives the continuous development of the risk management process.• Communication expert to different stakeholders across the organization• Supports the Security Governance of the ISMS• Support the Information Security Governance...

  • Security Researcher

    2 months ago


    India Altered Security Full time

    We are looking for top Security Researchers (Remote) with demonstrable expertise to join our team of experts!Altered Security is an information security startup with focus on edtech, hands-on learning and focused security assessments. It has offices in India and Singapore.We are experts in information security training, cyber ranges, online labs and security...

  • Security Researcher

    3 weeks ago


    India Altered Security Full time

    We are looking for top Security Researchers (Remote) with demonstrable expertise to join our team of experts! Altered Security is an information security startup with focus on edtech, hands-on learning and focused security assessments. It has offices in India and Singapore. We are experts in information security training, cyber ranges, online labs and...

  • Security Researcher

    3 weeks ago


    India Altered Security Full time

    We are looking for top Security Researchers (Remote) with demonstrable expertise to join our team of experts!Altered Security is an information security startup with focus on edtech, hands-on learning and focused security assessments. It has offices in India and Singapore.We are experts in information security training, cyber ranges, online labs and security...

  • Security Researcher

    2 months ago


    India Altered Security Full time

    We are looking for top Security Researchers (Remote) with demonstrable expertise to join our team of experts! Altered Security is an information security startup with focus on edtech, hands-on learning and focused security assessments. It has offices in India and Singapore. We are experts in information security training, cyber ranges, online labs and...

  • Security Researcher

    6 days ago


    India Altered Security Full time

    This position is not for SOC/SIEM candidates. We are looking for top Security Researchers (Remote) with demonstrable expertise to join our team of experts!Altered Security is an information security startup with focus on edtech, hands-on learning and focused security assessments. It has offices in India and Singapore.We are experts in information security...

  • Security Researcher

    5 days ago


    India Altered Security Full time

    This position is not for SOC/SIEM candidates . We are looking for top Security Researchers (Remote) with demonstrable expertise to join our team of experts! Altered Security is an information security startup with focus on edtech, hands-on learning and focused security assessments. It has offices in India and Singapore. We are experts in information...