Information Security & Compliance Specialist, Enterprise Technology Group
IndiaFull-time10–18 yrsPosted over a month ago
Leadership cybersecurity role at Sony Pictures Networks India. Needs 10+ years and a B.Sc, B.Tech or B.E..
About the role
ROLE PURPOSE Lead and continuously improve SPNI's information security program across governance, risk, compliance, architecture, cloud, identity, vulnerability management and incident response.
What you'll do
- Governance, ISMS, Compliance & Assurance
- Own and continually improve the ISO/IEC 27001:2022-aligned ISMS; maintain scope, risk methodology, Statement of Applicability, treatment plans and evidence
- Define executive KPIs/KRAs and dashboards covering material risks, control gaps, compliance status, remediation priorities, critical exposure, aging, recurrence
- Enterprise & Third-Party Risk Management
- Lead periodic and change-triggered risk assessments across business processes, technology, projects and suppliers; maintain a consolidated register with owners, ratings
What you need
- Compliance
- Vulnerability assessment
- Incident response
- SIEM
- Linux
- IAM
Good to have
- Firewalls
- DLP
- OWASP
- CISA
- CISM
- CISSP