JOB DESCRIPTION

1. Prepare & maintain IT risk management framework

2. Conduct risk assessment & prepare risk register

3. Implement the risk treatment options approved by management to mitigate the risks

4. Monitor the IT infrastrcuture & applications for security risks

5. Conduct security awareness training

6. Conduct periodic penetration tests & vulnerability assessments

7. Evaluate various security solutions & make recommendations

8. Maintain Information Security Management System

9. Coordinate with external & internal auditors

10. Any Other oraganizational task as deemed necessary by IT Management

Please note that the candidate must have at least 2 years experience in penetration testing (PT) & vulnerability assessment (VA). Should have worked with a security consulting company and handled at least 5 PT / VA projects with large firms. Should have been part of a team that led to successful certification of ISO 27001 for large firms.

 Should be a graduate in Computer Science (or) Electronics & Communication Engineering. Should have at least 5 years of post-qualification experience. Strong knowledge of systems, networking & applications security is essential. Should have hands-on experience in using a judicial mixture of open source as well as commercial security scanning tools.