The Information Security Manager leads IT auditing, risk assessments, ensures compliance, and aligns IT governance with business goals while communicating findings effectively.
Educational Qualifications:
Certifications: Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Internal Auditor (CIA), or other relevant certifications are often required or preferred.
Technical Skills:
Certifications: Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Internal Auditor (CIA), or other relevant certifications are often required or preferred.
Technical Skills:
- Audit and Compliance: Strong understanding of IT audit methodologies, control frameworks, and compliance standards (e.g., COBIT, ISO 27001, NIST, PCI DSS).
- Risk Assessment: Ability to conduct risk assessments and identify potential risks and vulnerabilities in IT systems and processes.
- Security Knowledge: In-depth knowledge of information security principles, practices, and technologies, including network security, application security, and data security.
- IT Governance: Understanding of IT governance frameworks and practices to ensure that IT aligns with business objectives.
- Data Analysis: Proficiency in using data analysis tools and techniques to analyze large datasets and identify patterns or anomalies.
- Audit Tools: Familiarity with audit tools and software commonly used in IT audit processes.
- IT Systems Knowledge: Understanding of various IT systems, cloud platforms (AWS, GCP, Azure), and technologies, including operating systems, databases, and network infrastructure.
- 3 years Audit Experience: Previous experience in IT auditing, either as an internal or external auditor, is often required.
- Industry Knowledge: Familiarity with the financial services/FinTech industry or sector in which the organization operates is beneficial.
- Communication Skills: Strong verbal and written communication skills to effectively communicate audit findings and recommendations to both technical and non-technical stakeholders.
- Analytical Skills: Strong analytical and problem-solving skills to assess complex IT systems and processes.
- Attention to Detail: Meticulous attention to detail to identify and document potential risks and weaknesses.
- Teamwork: Ability to work collaboratively with cross-functional teams, including IT professionals, business units, and management.
- Ethical Conduct: High ethical standards and integrity to maintain confidentiality and objectivity in the audit process.
- Adaptability: Ability to adapt to evolving technologies, regulations, and business environments.
- Professional Development: Demonstrated commitment to ongoing professional development and staying updated on industry trends and best practices.
Keep in mind that these specifications may vary depending on the organization's specific needs and the complexity of its IT environment.
Top Skills
AWS
Azure
Cia
Cisa
Cissp
Cobit
GCP
Iso 27001
Nist
Pci Dss
Similar Jobs
Healthtech • Logistics • Pharmaceutical
The role involves designing and implementing information security solutions, addressing security issues, and collaborating with other architects to enhance enterprise security architecture.
Top Skills:
Anti-VirusApplication ArchitectureCobitCybersecurityEdrEmail Security GatewayFirewallHTML/CSSIdentity And Access ManagementIso 27001/27002ItilJavaScriptMicrosoft Azure Security TechnologiesNetwork Solutions And SystemsNistPci)ProxiesPythonSecurity Standards (SoxSIEMSoarSoftware Development Life Cycle (Sdlc)SQLVpn Ids/Ips
Financial Services
In this role, assess and monitor technology risks, implement controls, evaluate their effectiveness, and advise on risk management strategies to enhance compliance and governance.
Top Skills:
Industry StandardsRisk Management FrameworksRisk Management Principles
Financial Services
As a Security Engineer III, you'll design and develop security solutions, troubleshoot security issues, and create secure production code while leading awareness and training in cybersecurity.
Top Skills:
AWSC#JavaLoad BalancersVulnerability Scanner
What you need to know about the Kolkata Tech Scene
When considering the industries shaping India's tech scene, gaming might not immediately come to mind. However, in the last decade, increased internet usage and greater access to mobile devices have catapulted the industry to new heights, with Kolkata-based companies like Virtualinfocom, Red Apple Technologies and Digitoonz, at the forefront, driving the design and animation of new gaming titles for players.
