Chief Information Security Officer, Mumbai

Qualification:

• Bachelor of Engineering in Computer / IT along with CISO/CISA certification with at least 20 years of relevant experience.

Job Description:

You will be responsible for ensuring security of all information and related data as well as the IT systems being used across all SVKM Institutions. You will be responsible for developing information security policy and ensuring strict implementation and taking appropriate follow-up action for breaches or violations that may occur from time to time. Keeping these broad responsibilities in mind. Your duties will include:

• You will ensure that all data with the organizations are protected and are not misused or accessed by unauthorized persons. You will develop appropriate data and information access policy, define protocols and implement the same.

• You will help in designing appropriate security systems, review security policies and after taking into account cyber incidents if any, help develop, update and modify security systems as may be necessary.

• To put in place proper system to carry out security audit and secure periodic security audit which, interilia, will look into network and system intrusions if any, identify vulnerabilities, suggest corrective measures on the basis of audit report and submit audit report with action taken or proposed to be taken, to the higher management.

• In case of any breach or wrongful access to information and data, carry out investigation, take appropriate action legally and administratively and also suggest corrective action for the future.

• Ensure compliance of all legal and contractual information security and privacy related matters and take necessary action to ensure the same from time to time.

• Responsible for reviewing, implementing, updating and documenting SVKM wide information security policies and procedures.

• Coordinate with Director-IT as well as with users at different levels, give training, create awareness or disseminate security related information to all concerned.

• In case of any sensitive or confidential information, you will escalate to higher management in person without disclosing data to anyone else and take further action as per direction of higher management.

Required Skills