Risk & Compliance Officer (Security)

Lakshya Recruitment Solutions Private Limited
  • Bangalore
  • Confidential
  • 5-7 years
  • 163 Views
  • 06 Aug 2015
dfdf

  • IT/ Information Technology

  • BPO/ ITES/ Call Centers, IT/ Technology - Security
Job Description

This is an opening with one of the Topmost ITES - BIG 6 organization.

Role Brief -

Conduct technical vulnerability assessments and risk assessment of the applications and infrastructure for BPO IT
Analyze the vulnerability assessment reports and discuss the same with the respective stake holders
Ensure on timely closure or remediation to risks, incidents and vulnerabilities
Provide support in new application/ platform review
Facilitate internal and external audits for BPO IT functions (ISO 27001, SOC1 and clients)
Conduct ISMS awareness and training for technical resources
Facilitate business continuity and disaster recovery activities for BPO IT

Key Responsibilities

Conduct technical vulnerability assessments and risk assessment of the applications and infrastructure for BPO IT
Analyse the vulnerability assessment reports and discuss the same with the respective stake holders
Ensure on timely closure or remediation to risks, incidents and vulnerabilities
Provide support in new application/ platform review

Essential Skills and Experience
Have sound knowledge on Windows & Linux operating system and application security.
Three years of information security experience. Out of the information security working experience, person should have worked in Security Operations Center.
Conducted vulnerability assessments and performed mitigation activities.
Should have worked in Security Operations Center.
Good communication and analytical skills.
Graduate in Science B.Sc / Engineering Graduate B.E in Computer Science / Electronics / Information Science
Certified Information System Security Professional (CISSP)

Desirable Skills and Experience

Taken part in the implementation of Infrastructure setup or has a fair knowledge on infrastructure components (Operating Systems, High Availability setup, Back office, Backup, network etc).
Has knowledge of application development lifecycle. Worked or provided support for application development infrastructure.
Security+
Certified Ethical Hacker (CEH)
Certified Information Systems Auditor (CISA)


Job Posted By