InfoSec Lead / Specialist
Kaleyra, India
Job Description
As part of our Kaleyra Information Security, Risk, Compliance, Resiliency and Technology Consulting team, you’ll contribute technically to Information Security, client engagements and Internal projects. An important part of your role will be actively establish, maintain and strengthen internal and external relationships. Similarly, you’ll anticipate and identify Infosec risks within engagements and at corporate level and share any issues with senior members of the team. In line with Kaleyra’s commitment to quality, you’ll confirm that work is of the highest quality and reviewed by the next-level reviewer. As an influential member of the team, you’ll help to create a positive learning culture, coach and counsel junior team members and help them to develop.
The opportunity
We’re looking for an Information Security Lead with expertise in cyber / information security concepts, risk and controls concepts. This is a fantastic opportunity to be part of Leading CPaas Technology firm whilst being instrumental in the growth of your career and organisation.
Your Key Responsibilities
- Engage in Information Security, Strategy, Risk and Governance jobs.
- Transformation and Co-Sourcing, Application amp; Network Security.
- Work Effectively as a team member, share responsibility, providing support, maintaining communication and updating senior team members on progress.
- Execute the requirements, along with review of work by junior team members.
- Help prepare reports and schedules that will be delivered to clients, internal stakeholders and Management.
- Develop and maintain working relationships with client and Internal stakeholders.
- Build strong internal relationships within function and with other functions across the organization.
- Maintain an educational program to continually develop Infosec and personal skills of staff.
- Understand and follow workplace policies and procedures.
- Help senior team members in performance reviews and contribute to performance feedback for staff/junior level team members.
- Foster teamwork and lead by example.
Skills and Attributes for Success
- Total experience of at least 5 or more years with key components of Information Security including (but not limited to):
- Information Security Strategy, Governance and Risk Assessments.
- Understanding of Regulations/Standards such as ISO 27001, PCI-DSS, GDPR, NIST 800-53, NIST-CSF, OWASP Top 10
- Business Continuity amp; Disaster Recovery
- Vendor Risk Management
- Application Security
- Network Security/Audit
- Hands-on experience in configuring and reviewing configuration of Network devices such as firewalls, routers etc. and should have exposures to network related vulnerabilities and risks including firewall and tool-based review.
- Understanding of security issues, exploitation techniques and remediation measures.
- Prepare threat modelling for applications and prepare reports for management to highlight risks.
- Deep Understanding of common application security vulnerabilities.
- Knowledge of tools and technology related to Cyber / Information security.
- Knowledge of creation of policies and procedures.
- Knowledge of Incident,Problem and Change Management.
- Understanding skills in IPSec VPN Technologies, Clustering and High availability (HA) concepts.
- Demonstrated expertise in application security domain
- Understanding of Cloud Infrastructure like Azure, AWS and GCP
To qualify for the role, you must have
- Graduates / BE - B.Tech / MCA / MBA with background in Computer Science.
- At least 4 - 4.5 years of relevant experience.
- Strong Excel and Powerpoint skills.
- Should be proficient in leading and coaching junior staff members