Manager / Assistant Manager – Information Security

Create Information security strategy both short term and long term.

Conducting Application security and vulnerability check and monitor this as periodic activity.

Communicate risk and recommendation to mitigate risk.

Develop Information security awareness training and education program, work with other BFSL department to ensure proper training material.

Set and implement user access controls and identity and access management systems.

Monitor network and application performance to identify and irregular activity.

Perform regular audits to ensure security practices are compliant.

Deploy endpoint detection and prevention tools to thwart malicious hacks.

Set up patch management systems to update applications automatically.

Implement comprehensive vulnerability management systems across all assets on-premises and in the cloud.

Work with IT operations to set up a shared disaster recovery/business continuity plan.

Work with HR and/or team leads to educate employees on how to identify suspicious activity.

Lead in the development/adoption and enforcement of Information Security policies, procedures and standards. Conduct and complete an annual review of required PCI/DSS regulations and reports.

Ensure personnel only have access to the sensitive information for which they have appropriate authority and clearance.

Ensure controls in place against unauthorized access to workstations and related equipment.

Set the access and authorization controls for everyday operations as well as emergency procedures for data.

Set the standards for access controls, audit trails, event reporting, encryption and integrity controls.

Good Understanding Latest Network/Security Technology in the Market such as

PCI-DSS Compliance, ISO 27001 Standard, Fair idea on Information security tools and Technology.

Qualifications Graduate, BE.

Relevant IT certification, ISO27001 or CISA, Well versed with PCI-DSS Compliance.