Preparing the Bank for ISO-27001: 20013 Certification
Periodic review of Banks information security policies, procedures and setup Application Security Testing
Perform VA and PT of given technology
Review of security reports to verify findings and help respective teams in resolving the same on a regular basis
Monitor and analyse logs and reports from various security systems such as SIEM, FIM, DAM, WAF etc.
Perform analysis on any suspicious activity or incidents
Periodic review and update of Application Security Life Cycle and Application, API Security checklists etc.
Review and provide recommendations on the application checklists submitted by project teams identifying risks and providing recommendations.
Evaluate and test mobile applications jointly with IT and Application service providers teams
Compliance: Manage compliance of various circulars, advisories and alerts provided by Cert-In and RBI
Periodic analysis and reporting as prescribed by regulators
Co-ordination during audits
InfoSec Training, Awareness creation and Education:
Evaluate general and specific training needs
Prepare and contribute towards corporate InfoSec awareness program
Conduct training and create awareness about Secure SDLC, Secure Coding and Application Security best practices
Conducting Cyber-drills and Desk Top Exercise
Experience & Qualifications: Essential: Overall experience in IT for 1 to 3 years Good academic background having BE or BTech in Computers / MCS / MCA Desirable: Certifications CEH, CISA, CISM, CRISC, OSCP or CISSP & other Security related certifications would be preferred 1-2 year(s) of experience on Mobile Application security and API security would be preferred 1-2 year(s) experience in Securing applications. If you are interested, please share your updated profile at bh*******a@su*********k.com Salary: INR 5,00,000 - 8,00,000 PA. Industry: Banking / Financial Services / Broking Employment Type: Full Time, Permanent , Education:UG -Any Graduate PG - Any Postgraduate Doctorate - Any Doctorate
Employement Category:
Employement Type: Full timeIndustry: Banking / Financial ServicesRole Category: General / Other SoftwareFunctional Area: Not ApplicableRole/Responsibilies: Information Security Analyst