Lead / Information Security Analyst Job in Figmd

Major Responsibilities:

• Research security enhancements and make recommendations to management

• Stay up-to-date on information technology trends and security standards

• Investigate security breaches and other cyber security incidents

• Document security breaches and assess the damage they cause

• Stay current on IT security trends and news

• Risk management

• Answer security questionnaires

• Handling client calls for info sec

• Development, documentation, and maintenance of information security policies, procedures, and standards

• Initiates, facilitates, and promotes activities to create information security awareness throughout organization

• Monitors and routinely audits compliance to all information security procedures and policies, and ensures consistency of internal controls and software compliance

• Observes changes in regulations and accreditation standards affecting information security, and makes recommendations on the need for policy changes

• Coordinates response to legal requests for data protection, legal hold, access, etc.

• Coordinates the response to, investigates, escalates, mitigates, and reports actual and attempted cyber security incidents and communicates in alignment with a cyber-incident communication plan

• Vendor Management - Evaluate new tools, prepare BOM, negotiate

• Deep understanding of infrastructure (data center, network & end user computing) security / cloud security / managed security services / security operations center / compliance & risk management

Competencies:

General Skills:

• Knowledge on any of the following security standards

• ISO27001

• HIPAA

• HITRUST

• HITECH

• SOC2

• EHNAC

• PCI DSS

• NIST

Technical/Domain Skills:

• Experience on answering security questionnaire

• A high sense of urgency and deep interest in serving the customer

• Hands on functional understanding of various technologies in security

• Proven track record in Pre-Sales, IT Outsourcing

• Self-motivated individual with excellent interpersonal skills, flexibility and team work capabilities

• Proven track record in RFI and RFP response (Pre-Sales, Solution design & development, Proposal response and presentation) in the area of Cyber Security Solutions by strongly collaborating with larger infrastructure, applications, Cloud and Digital functions

• Knowledge and experience managing IT security programs including governance, policies, risk management, architecture, and awareness

• In depth knowledge of operating systems, network elements and protocols, encryption tools, client-server and web architectures, firewalls, and intrusion detection/prevention systems, patch management, antivirus etc.

• Familiarity with application security, databases technologies, identity, and access management

• Knowledge in network protocols such TCP/IP, UDP, HTTP, TLS, SMB, SSH, RDP and any other prominent internal protocols

• Ability to present to a variety of audience from technical to managerial

• Ability to align the Cyber insider threats to the impact on the customer business of the customer etc.

• Language requirement: fluent in English, excellent communication and personality

• Understanding of cloud security solution and Security architecture and design experience

• Experience within the domain of information systems and security/data protection

• Excellent oral and written communication skills

Education:

• BE / B. Tech Preferred

• Degree or PG in Computer Science or IT

• Full Time Technical Diploma