sr. Information Security analystTech Mahindra

Qualifications:
 
· B.E. / B.Tech / B.Sc/ M.Tech with relevant experience and managerial knowledge of handling Information Security Compliance related activities in line with the security requirements for Applications, networks , systems and services .
· Experience of having managed deliverables and teams with Exposure to IT infrastructure technologies in the areas of Network/System/Security domain.
· Customer & internal Security audits / assessments.
· Desirable certifications (Any of the following): CISA/CISM, CISSP, CCNA, CPISI, ISO 27001, ISO 22301
 
Roles and Responsibilities:
 
· Support Implementation of Information Security , data protection and privacy security practices and standards
· Custodian of Security requirements annexures in MSA's for all SBU's
· Support Risk Assessment and Management activities for the accounts and assignments
· Prepare compliance handbook to provide requirements to the assurance teams
· Train and educate the business units for security training programs and initiatives across the organization
· Check and validate compliance for all SBU's in scope across the organization
· Prepare the monthly report per SBU
· Distribute ISBC score card and respond to SBU queries on the scorecards
· Ensure all programs are compiled to for actions related to ISMS, BCMS, Data privacy, Cyber security management aligned to the customer MSA security needs
· Engage in customer's audits, engagements and assessments
· Own and represent the 3rd party audits for certification requirements or gap assessments
· Track Non-compliance and outstanding risks across SBU's for closure as raised by the Assurance teams.
· Support for service desk tickets allocated for ISG Unit services
· Prepare the monthly report for the SBU and share post review with the Compliance Head to respective SBU representatives
· Ensures that program deliverables related to the ISO22301 are complied.
· Coordinates to provide support for the BIA, Continuity risk assessment, RTO alignment, recovery strategies, continuity plan definition and testing needs