Educational Requirements

Bachelor of Engineering

Service Line

Information Security Group

Responsibilities

Be a reviewer for implementation of the information security control framework by working with all relevant stakeholdersConduct and draft information security risk assessment Conduct ISG driven internal SPOT checks Help and support implementation of all the contractual requirements within the engagementHandle various standard, regulatory and compliance requirements such as ISO27001, SSAE16, PCI DSS, HIPAA etc
Respond to RFPs and RFIs, review agreements for prospects or clientsAnalyze data generated during ongoing information processing activities to generate metrics that indicate the level of risk Conduct awareness sessions within InfosysVerify compliance to contractual requirements within the engagementSupport ISG managers during client audits at different locations

Additional Responsibilities:

Engineering Graduate or equivalent with 2 to 4 years of experience/ Post Graduate with 2 years of experienceThe candidate shall hold certifications ISO 27001 Lead Auditor\Lead implementer

Technical and Professional Requirements:

The candidate shall have at least 2-4 yearsexperience in Information Security Governance, risk and compliance management with strong data and network security concepts
The candidate shall have good experience in the areas of Risk Management, Governance, Compliance, Security policy and Metrics
The candidate should possess good technical, analytical, troubleshooting and problem solving skills
He shall have excellent communication and collaboration skills
The candidate shall possess good understanding of ISO 27001:2013, SSAE 16 SOC 1 & SOC 2, PCI DSS, HIPAA & other industry recommended standards and regulations
The candidate shall have strong technical understanding of Information Security

Preferred Skills:

Domain->Infrastructure-Information Security Management->ISO 27001 Audit

Implementation

Information Security Engineer

Job Description