Group Manager - Information Security

Responsibilities :

1. Working knowledge of various other Best Practices, Standards, Regulatory and Statutory frameworks such as, but not limited to, SSAE-16 / 18, PCI DSS, HIPAA, GLBA, SoX, SANS Critical Security Controls (CSC), Privacy in general but General Data Protection Regulation (GDPR) in particular 11.11 Stay abreast with the fast changing world of Information Technology and Cyber Security and liaison with leading Industry bodies / forums and CxO community to share and learn ideas, and adopt best practices where possible 1.2 ISO 27001 Lead Auditor (LA) or Lead Implementer (LI) Certification Mandatory 1.3 CISSP certification Mandatory

Additional Responsibilities:

1 Self-starter, positive mentality and a go getter attitude mandatory 2 Strong verbal and written communications skills mandatory, including creative writing skills 3 Strong people and negotiation skills mandatory 12.4 Quick learner, a researching mentality and ability to adapt to and meet demands of a fast changing environment

Technical and Professional Requirements:

1. If required, be able to interface with the Client counterparts and their Leadership to provide the right assurance with regards to Infosys Information Security Practices safeguarding their data 2. Ensure multi-faceted, business-focused Security strategies are implemented which would bridge the gap between technical and business functions while ensuring Security at the same time 3. As the owner of the IT GRC system, liaison with various module owners to drive appropriate decisions which will bring in important improvements on how the system is used individually at a module level and as a GRC system as a whole in a most optimal manner 4. Keep self completely up to date with the activities of other ISG Functions / Groups so as to be able to glean on the issues and whether it is in line with the Cyber Security Strategy and thus the CISO's agenda