Operates formalized Information Security programs and processes such as Vulnerability Management, Risk Assessment, Third Party Assessments, System Hardening and Security Requests
Perform risk assessments for systems and services
Design controls to mitigate risk
Tests security control implementations for effectiveness of design and operation
Supports the technical execution of established Information Security protocols such as Incident Response and Event Monitoring
Maintains security and compliance performance metrics
Communicates and collaborates effectively with both technical and non-technical teams/business units
Researches and prepares periodic and ad-hoc reports of Information Security program execution
Develops and maintains documentation for supported policies, processes and procedures
Performs ongoing research of Information Security related topic
Supports with execution of fixes as guided by the team
Provides after-hours support on an as needed basis
Performs additional duties as assigned
Eligibility Criteria:
Any Graduate from any stream
Preferred skill:
0-3 years of cybersecurity/SOC experience
ISO 27001/SOC 2 Type 2 certification experience
Working experience of public clouds ( Azure, Google) preferred
IT administration experience a plus
Knowledge of application security and devsecops a plus
Bachelor’s degree in Computer Science or Information Technologies required or equivalent experience
Information security certification or related certifications highly desirable
