Security Officer IT industry Goregaon Mumbai

Job Description

Job Title: Security Officer IT industry Goregaon - Mumbai A Leading online payment and POS service expert company requires a Security Officer and the responsibilities includeJob Title: Security Officer IT industry Goregaon - MumbaiJob ResponsibilitiesSupport maintenance and development of the PCI Control Framework and related processes and procedures.Perform activities to help measure and monitor compliance with company policies and procedures.Should have good understanding of network and Linux OS concepts.Well versed with access lists, operating system hardening standards, IT Infrastructure, DMZ architectures, B2B and B2C connectivity.Have a good technical awareness and the aptitude to remain up to date with information security and IT developments.Good Understanding of internal and external IT security standards, ISO and PCI standards and relevant legal compliance aspects.Ability to interface with different groups (Third parties Auditor, Clients, Business and internal IT).Responsible to maintain on going compliance:Conduct internal & external PT in the guidance of external auditor.Conduct employee security awareness training.Complete the on-site PCI assessment.Conduct risk assessment & application security assessment.Review production infrastructure (network, server, firewall and antivirus configuration & logs) and business services work flow to strengthen more in purview of security domainConduct and pass an ASV vulnerability scan.Conduct internal vulnerability scan.Coordinate with Production team and plan patching of all servers within the CDE (Card Data Environment) periodically.Review & update Inventory complete IT Infrastructure (network/server/firewall/application). - Review information security policies & incident response planKey Skills: Key Skills:Strong verbal, written communication & analytical skills.Demonstrates good inter-personal skills, high standards of professional behavior in dealings with business customers, colleagues and staffs.Good technical knowledge of IT infrastructure. Strong analytical, problem solving & organizational capabilities. Technical Skills:Proficiency into IT, Governance, Risk & compliance domain. Good understanding and working knowledge of PCI-DSS and ISO 27001 implementation and sustenance. Risk assessment, monitoring & tracking. Facing Client & external audit / auditors. Perform Internal audit. ITGC (IT General Controls) Audit. Conduct Security Awareness training & development of awareness mailers. RFP, GDPR Data transfer agreement & contractual security obligations review. Assessment of PII (personally identifiable information) data processing from GDPR perspective in engagements. Understanding on RBI Security guidelines on payment card standards. Incident management Impact assessment, Root cause analysis and evidence collection. Passionate to work in Information security domain to avoid losses from security incidents, to maintain the high standards of confidentiality, Integrity and availability in handling and protecting sensitive client and organization information.Mandatory:Certification such as CISA / CISSP / CEH / ISO27001 are good to have, high preference for CISA.Additionally any one certification related to Linux is must, preference will be given to RedHat certificationworking knowledge of PCI-DSS and ISO 27001 implementation and sustenance. Industry: ITGender: OpenExperience: 6 to 10 yearsJob Location: Mumbai, GoregaonWorking Days: 6 daysReporting to: Qualification: BE / BTech / with minimum 06 to 10 years of dedicated experience in Information Security and IT Infrastructure AdministrationCTC: upto 18 LPANotice Period: Immediate to 30 daysRelocation candidates: NoNote:Please send me your updated CV in WORD file not in PDF fileCandidates with relevent Experience, Qualification, Certification may applyAll CVs will be viewed, Only SHORTLISTED CANDIDATES will be NOTIFIED

Keyskills :
itinfrastructure compliance risk cctv domain cicontrolframework dataprocessingfromgdprperspective pci-dssiso27001 performinternalaudit networklinuxosconcepts