Cyber Governance Manager

Cyber Governance Manager

Corporate 1100-Corporate Office, Bangalore, Karnataka, India

• POSITION DESCRIPTION

• ROLE PURPOSE & OBJECTIVE
  
  

• The Cyber Governance Officer under the direct supervision of the CISO is responsible for planning and development of information security policies.
• Plans and manages information security compliance audits and reviews in line with the ISMS Internal audit plan and request / advice from the CISO and as per the security assessment and compliance policy.
  
  

• SIZE OF THE ROLE
  
  

• CAPEX / OPEX Budgets resting with the role- 4 cr.
• Total Buying / Procurement- Technology Subscription, consultancy, membership and insurance. – 4 CR included as above.
  

• Number of vendors / consultants- 2
• New vendor onboarding- Approx. 15
• New Product Evaluation- Approx. 15
  
  

• KEY DUTIES & RESPONSIBILITIES OF THE ROLE
  
  

• Planning and developing security policy and standard documents.
• Periodically reviewing the policy and standard documents.
• Plan and manage information security compliance audits and reviews in line with the ISMS Internal audit plan and request / advice from the CISO and as per the security assessment and compliance policy.
• Supporting Ujjivan’s IS compliance.
• Planning, delivering and managing information security awareness initiatives within Ujjivan.
• Acting on threat intelligence
• Management of Application security Audits/Vulnerability Assessments/Penetration Testing/Red Team Exercises
• Management of Cyber Drills
• Privacy Framework Implementation
  
  

• Keeping customer information safe and secure.
  
  

• Adhering to information security policy procedure and guidelines. Working on improving internal process for better security and efficiency.
  
  

• Should continuously work on gaining and improving information security updates on best practices, new threats and countermeasures to secure the Ujjivan information security.
  
  

• MINIMUM REQUIREMENTS OF KNOWLEDGE & SKILLS
  
  

• Bachelor’s degree in Computer Science or related field.
  
  

• 7-8 years
  
  

• CISM/CISSP/CISA/CRISC/ISO/IEC27001
  
  

• Experience in Information security governance and management. Must have hands on experience in risk assessment and training
• Knowledge of ISO 27001, 31000, COBIT, NIST Frameworks related to Information Security, Privacy Frameworks such as GDPR, familiarity with RBI Cyber Security Framework.
  
  

• Personal integrity
• Team Management
• Time Management
  
  

• Building Relationship
• Driving Change
• Planning & organizing
  
  

• KEY INTERACTIONS