CISO

Education Qualification

Engineering or Science graduate / PG in related field such as Computer Science, IT, Electronics & Communications or a Cyber Security related field or MCA or equivalent qualification from recognized university.

Professional Qualifications (Preferred)

1. Certified Information Systems Security Professional
2. Certified Information Security Manager
3. Certified Chief Information Security Officer
4. Certified Information Systems Auditor

Experience: Minimum 12 – 15 years in which minimum 7 yrs should be in the core domain areas of Information Security at Senior level.

Core Responsibilities:

1. Bringing to the notice of Management, the vulnerabilities and Cyber security risk the organization is exposed to.
2. Identifying Current / Emerging Cyber threats the organization and our preparedness in these aspects
3. Maintaining and update the threat landscape for the organization on a regular basis including staying up to date about the latest security threat environment and related tech developments.
4. Developing and implementing a security architecture for the organization by leveraging technology and understanding threat landscape.
5. Ensuring that periodic tests are conducted to evaluate the adequacy and effectiveness of technical security control measures, especially change to the IT applications / systems/ network as well as after any major incident.
6. Strategic & Policy Planning:
   1. Identify information security goals and objectives consistent with business needs.
   2. Define the scope and boundary of the IS program.
   3. Understand legal and regulatory requirements and ensure compliance with that.
   4. Estimate budgets and resources required.
   5. Plan and establish organization wide information security management systems (ISMS) in accordance with ISO 27001 standards.
   6. Define Risk Management framework.
   7. Adherence to Information Security policy.
   8. Assist in developing, maintaining, reviewing and improving strategic organization-wide IS and RM plan.
   1. Dissemination of IS policies and creating awareness around IS issues.
   10. Perform Risk assessment & Risk treatment
   11. Maintain continuous monitoring and record of Security incidents and breaches
   50. Coordinate and lead in implementation of Business Continuity Plan (BCP) and DR.
   1000. Ensure all Information Systems with organization are adequately patched and updated.
7. Information Security Audit of IT systems and controls, including Site audits as appropriate.

Developing and implementation of scenario based Incident Response plans to deal with Cyber Crisis, contingencies and disasters, attach on IT systems etc. This should include incident containment, assessment, RCA, mitigation, prevention, continuous monitoring, forensics and reporting (Internal & to Cert-In) as required.

Upman Placements is a firm of Researcher & Recruitment Specialists. The company started life in 2002 in India as a recruitment specialist firm. The company has built a stellar reputation for high ethical standards, a specialized focus and unparalleled service. Emerged As one of the only truly global specialized staffing firms focusing exclusively in professional positions for our clients spread across more than 20 countries with a sizable presence across industry levels. With footprints in competitive markets of India, Europe, United Kingdom, Middle East, Singapore, Malaysia, Philippines, Indonesia, Brunei and East & Central African countries.