Job description
This is a remote position.
Job Description for Information Security Lead:
Roles and Responsibilities
Monitor computer networks for security issues.
Investigate security breaches and other cybersecurity incidents.
Install security measures and operate software to protect systems and information
infrastructure, including firewalls and data encryption programs.
Document security breaches and assess the damage they cause.
Implement penetration testing along with ethical hacking.
Fix detected vulnerabilities to maintain a high-security standard.
Stay current on IT security trends and news.
Develop company-wide best practices for IT security.
Help colleagues install security software and understand information security
management.
Research security enhancements and make recommendations to management.
Stay up-to-date on information technology trends and security standards.
Revise and analyse IT operations and systems, hardware configurations, physical
security and operating procedures across organization.
Consult and comply with set controls, standards, policies and procedures while
carrying out IT activities.
Search technology and reduce risks in every information security segment.
Suggest measures to improve IT related procedures, operations, processes and
systems throughout organization.
Suggest and execute IT technologies, strategies and policies to guard customer’s
information assets.
Implement security risk analysis for current and new systems to find system
weaknesses or disclosures.
Recommend solutions for explaining risks and reducing exposure areas.
Prepare security program plans and execute IT controls, processes, audit tools,
interfaces and utilities for authentication.
Perform as chief for audits and security aspects (ISO 27001).
Support and provide consultancy for audit compliance actions.
Implement periodic, on-demand project audits plus vulnerability analysis.
Determine compliance through user accounts, application usage, system file and
outside scans.
Perform independently in team implementing security and privacy engagements.
Review client networks and applications.
Compliance with industry standards such as ISO 27001, NIST-800-53, CIS
Benchmarks, SWIFT SCSF, etc.
·Supporting audits related to security
·Hands on ISO 27001.
·Experience of IAM.
Experience with computer network penetration testing and techniques.
Understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts.
Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
Understanding of patch management with the ability to deploy patches in a timely
manner while understanding business impact.
Requirements
Required Skills:
·Fluent ENGLISH, both verbal and spoken
5+ years of experience in information security or related field.
·Vulnerability Management full cycle
Developing, implementing, and monitoring compliance with security baselines
Security patch management full cycle for OS, databases and applications
·Security incident management full cycle
·Hands on ISO 27001.
·Experience of IAM.
Experience with computer network penetration testing and techniques.
Understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts.
Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
Understanding of patch management with the ability to deploy patches in a timely
manner while understanding business impact.
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.