Industry Type:
Risk / Safety / Compliance / Privancy / Security

Job Detail:

We have an exciting opportunity for you to join our team as Information Security Specialist. Reporting to the Head of Department, this full-time and permanent position is based in Mumbai, India and offers regional coverage, allowing you to make a significant impact to our Cyber security Department and its growth.

Key Responsibilities

Key Responsibilities of the Information Security Specialist

Global Information Security Management

Delivery: Implement and manage information security strategies across Vistra, focusing on Asia.

Approach: Adhere to global security procedures while adapting to regional needs.

Collaboration: Work with the global information security team and regional stakeholders.

Business Continuity Planning (BCP)

Delivery: Develop and maintain BCM, DR, and BIA processes.

Approach: Use existing frameworks, Including DORA, conduct annual effectiveness tests.

Collaboration: Partner with IT, HR, and operational teams.

Risk Management

Delivery: Identify and mitigate information security risks.

Approach: Analyse risks using past precedents and implement mitigation strategies.

Collaboration: Engage with security, audit, and business unit leaders.

Audit and Compliance

Delivery: Support audit activities and ensure compliance with regulations.

Approach: Assist in internal and external audits, follow up on findings.

Collaboration: Liaise with compliance, audit teams, and external auditors.

Security Awareness Training

Delivery: Raise security awareness and conduct training.

Approach: Develop engaging programs adapted to regional needs.

Collaboration: Work with HR and managers to deliver training.

This streamlined set of responsibilities highlights the critical role of the Information Security Specialist in safeguarding Vistra’s data and systems, with a focus on the Asia region, without direct reports but in close collaboration with various teams and stakeholders.

Attributes/Technical Skills

Attributes and Technical Skills for the Information Security Specialist

Core Competencies:

• Analytical Skills: Ability to identify risks and vulnerabilities and devise effective mitigation strategies.
• Communication Skills: Strong ability to articulate security policies, risks, and advice effectively to various audiences.
• Influence: Ability to lead by example, influence security best practices, and promote a culture of security awareness.
• Problem-Solving: Skilled in addressing complex security issues with innovative solutions.
• Adaptability: Can adapt to rapidly changing threat landscapes and business needs.

Technical Skills Required:

• Information Security Management: Profound knowledge of information security principles, frameworks (e.g., ISO 27001, NIST), and regulations (e.g., GDPR).
• Business Continuity and Disaster Recovery Planning: Experience in developing, implementing, and testing BCP and DR plans.Understanding of new regulations e.g. DORA
• Risk Assessment and Management: Expertise in conducting risk assessments, audits, and applying risk management strategies.
• IT Systems and Network Security: Understanding of IT infrastructure, network security, and the various threats posed to them.
• Incident Management: Ability to manage and respond to security incidents effectively.
• Languages: Proficiency in English is required to cater to the specific regional focus in Asia, particularly for effective communication and training delivery.
• Cybersecurity Technologies: Familiarity with current cybersecurity technologies and trends, including firewalls, anti-virus software, and intrusion detection/prevention systems.
• Data Privacy: Understanding of data privacy principles and laws, especially as they apply in the Asia region.

Relevant Experience

Relevant Experience for the Information Security Specialist

• Years of Experience: 5-8 years of work experience in the field of Information Security, Business Continuity Management, or a related area is required.
• Type of Experience:
• Proven track record in developing and implementing information security policies and procedures within a global organization.
• Hands-on experience with Business Continuity Planning (BCP), Disaster Recovery (DR) processes, and Business Impact Analysis (BIA).Experience in conducting risk assessments, managing audits (internal and external), and compliance checks with information security standards (e.g., ISO 27001, NIST).Demonstrated ability in incident management and response, alongside a strong understanding of IT and network security principles.
• Effective communication and stakeholder management skills
• Previous involvement in projects that require coordination across multiple jurisdictions, particularly in the Asia region.
• Experience in cybersecurity technologies deployment and management, and familiarity with the latest trends and threats in cyber security.
• Contributions to the development and maintenance of information security frameworks and certifications within an organization.
• Experience in the financial or professional services sector, with an understanding of the specific information security challenges and regulatory requirements in these industries.

Education and Professional Qualification

Educational Background:

• A bachelors degree in computer science, Information Technology, Cybersecurity, or a related field is required.
• Demonstrable knowledge and understanding of information security frameworks and standards such as ISO 27001, NIST, or similar.

Professional Qualifications:

The education and professional qualifications section outlines the foundational academic background and essential certifications necessary to perform the core functions of the Information Security Specialist role effectively. The desirable qualifications aim to highlight additional credentials and specializations that would enrich the candidates ability to contribute to higher-level strategic initiatives and tackle the complex challenges faced by an international organization like Vistra.

Company Benefits:

At our Vistra India office, we believe in putting our employees’ well-being first! We offer a hybrid working arrangement. Additionally, we provide attractive insurance benefits, excellent job exposure and career prospects.

If you are excited about working with us, we encourage you to apply or have a confidential chat with one of our Talent Acquisition team members. Our goal is to make this a great place to work where all our people can thrive. We hope you join us on this exciting journey!

Apply Here:

Industry Type:
Risk / Safety / Compliance / Privancy / Security

Job Detail:

Apply Here:

Industry Type:
BFSI / Fintech / NBFC

Job Detail:
 

Job Title:Cyber Hygiene Delivery Manager, AVP

Location:Pune, India

Role Description

What we’ll offer you

As part of our flexible scheme, here are just some of the benefits that youll enjoy

Your key responsibilities

Your skills and experience

How we’ll support you

Apply Here:

Industry Type:
Risk / Safety / Compliance / Privancy / Security

Job Detail:

Apply Here:

Industry Type:
Consulting/ Analytics/ Insights/ Accounting/ Audit

Job Detail:

Not Applicable

Managed Services

Associate

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.

In cybersecurity incident management at PwC, you will focus on effectively responding to, and mitigating, cyber threats, maintaining the security of client systems and data. You will be responsible for identifying, analysing, and resolving security incidents to minimise potential damage and protect against future attacks.

• Apply a learning mindset and take ownership for your own development.
• Appreciate diverse perspectives, needs, and feelings of others.
• Adopt habits to sustain high performance and develop your potential.
• Actively listen, ask questions to check understanding, and clearly express ideas.
• Seek, reflect, act on, and give feedback.
• Gather information from a range of sources to analyse facts and discern patterns.
• Commit to understanding how the business works and building commercial awareness.
• Learn and apply professional and technical standards (e.g. refer to specific PwC tax and audit guidance), uphold the Firms code of conduct and independence requirements.

• Qualification BE / B Tech / ME / M Tech / B.SC / B.Com / BBA

• Candidate should be willing to work in IST/EST shift timing.
• Demonstrates experience driving the configuration of vulnerability assessment tools, including the integration of feedback from IT owners to reduce false positives.
• Demonstrates experience performing analysis and prioritization of identified vulnerabilities and remediation recommendations.
• Demonstrates experience preparing vulnerability data and reports for technical and executive audiences.
• Demonstrates experience identifying timelines/programs and guiding teams to address vulnerabilities, including system patching, deployment of specialized controls, code or infrastructure changes, changes in build engineering processes.
• Demonstrates experience tracking and remediation of vulnerabilities leveraging agreed upon action plans and timelines with responsible technology partners and support teams.
• Demonstrates experience designing and overseeing actionable dashboards and scorecards.
• Demonstrates experience reviewing and coordinating changes to patch policies, procedures, standards and audit work programs in a continuous improvement model.
• Demonstrates experience driving the protection of valuable information and maintaining confidentiality and integrity of data through knowledge of security management, network protocols, data, application security solutions.
• Demonstrates knowledge of industry trends, including current and emerging risks.
• Demonstrates knowledge of relevant legislation, regulatory requirements, guidelines, and industry developments related to data protection, privacy, security, and data governance.
• Demonstrates experience with end to end Vulnerability Management processes and tools including host based applications scanners, patch management, GRC tools and ITSM.
• Demonstrates knowledge of operating system and application security, administration and debugging.
• Demonstrates knowledge of security controls including access controls, auditing, authentication, encryption, integrity, physical security and application security and Vulnerability Management tools, like Qualys, Tenable, Nessus.

• Use feedback and reflection to develop selfawareness, personal strengths and address development areas.
• Delegate to others to provide stretch opportunities and coach to help deliver results.
• Develop new ideas and propose innovative solutions to problems.
• Use a broad range of tools and techniques to extract insights from current trends in the business area.
• Review your work and that of others for quality, accuracy and relevance.
• Share relevant thought with leadership.
• Use straightforward communication, in a structured way, when influencing others.
• Able to read situations and modify behavior to build quality, diverse relationships.

Degrees/Field of Study required

Degrees/Field of Study preferred

Accepting Feedback, Accepting Feedback, Active Listening, Communication, Cybersecurity Framework, Cybersecurity Governance, Cybersecurity Risk Management, Cybersecurity Strategy, Cyber Security Threat Mitigation, Cyber Threat Intelligence, Digital Forensics, Emotional Regulation, Empathy, Firewall (Network Security), Forensic Investigation, Incident Management, Incident Remediation, Incident Response Plan, Inclusion, Intellectual Curiosity, Log Analysis, Mitigation Measures, Network Forensics, Network Infrastructure, Network Security Platforms {+ 10 more}

No

No

Apply Here: