Information Security Engineer

Work youll do

This role would be part of Cyber Security team and would actively engage in

implementing our vendor information security risk management program for achieving firm’s GRC objectives. As part of this team, you will be assisting in reviewing and assessing vendor’s information security program, processes and controls to identify weaknesses in their information system and discover potential threats to and its assets. You would be reporting assessment results to necessary stakeholders, following up on remediation plan, ensuring timely remediation and providing appropriate recommendations to the vendor for ensuring adequate protection of information assets. You would collaborate and coordinate with various key stakeholders, both onshore and offshore, such as vendors, internal business clients, internal teams, SMEs and Cyber Security management.

-

• Responsible for reviewing and assessing vendor security controls to protect facilities, systems (assets and networks) and data

• Responsible for ensuring vendors working within the framework of security policies that is being clearly laid out for them

• Maintaining regular communications with vendor risk management team on progress status

• Followup with vendors and business teams to ensure timely remediation of assessment findings

• Driving security awareness program across the organization and promoting cyber security firm initiatives

Educational Qualification:

• Bachelor’s degree in computer science, Business Administration or equivalent educational or professional experience and/or qualifications

• 3-5 years of relevant experience

• Experience with information technology security programs, audits, controls, assessments, risk assessments, or remediation management

• Demonstrated proficiency in Security and Compliance, including information security and technology regulatory requirements (SOC 2, ISO27001, NIST800-53, PCAOB, CSA, etc.)

• Experience with Governance, Risk & Compliance tools

• Strong communication, report writing and presentation skills

• Ability to work independently and cross-functionally

• Excellent time management and related organizational skills including appropriate sense of urgency and a proactive approach

• Industry certifications (e.g., CISA, CISM, CISSP, CCSP and/or other equivalent licenses/certifications)

Work Experience

• Good knowledge of information security principles, policies, processes and practices.

• Good knowledge about security controls for cloud services.

• Good to have information security program implementation and/or audit experience.

• Good to have certifications such as ISO 27001, ISO 27002, ISO 22301, CEH, CISAse

• Cyber Resilience