Manager, InfoSec Architecture & Operations

• Perform scanning and risk analysis for potential security issues                                                               
• Perform risk analysis and remediation recommendations in IT related operations including network operations, systems engineering, change management, and general IT administration oversight            
• Assist CISO in Designing, administering and maintaining various technical security tools  
• Identify issues that could impact the organization and escalate any serious issues/ breaches/ violations                                                                                                     
• Develop/monitor action plans for its closure in liaison with business groups.
• Provide guidance to operations management team for effective and efficient surveillance and monitoring towards pro-active security and business process non-compliance issue identification
• Responsible for designing the security architecture
• Contribute to the recommendations of corporate solutions to resolve security issues.                     
• Provide mechanisms to monitor all critical services and implementing a measurable Key Risk Indicators (KRIs) & manages the security planning, assessment, risk analysis, risk management, and awareness activities for systems and networking operations.                             
• Oversee the information security operations and penetration testing                                    
• Conduct Assurance activities on the implemented security controls and identify and propose corrective action                                                                                                                      
• Interact with technology team to define and achieve required security objectives for the organization.                                                                                                              

Requirements

• Bachelor's degree of Engineering or Computer Science is a must               
• 12+ years of relevant experience in information security risk management and assessments/audits.
• CISM, CRISC, CISSP, SANS SEC401, CBE, PCI is a plus.