Information Security Specialist

Role: Lead Specialist -Information Security / Technical Specialist Information Security

Location: Trivandrum / Pune

Experience: 7+

Skills: Information Security, Cyber Security, GRC, Individual Contributor 

Certification: CISM / CISA / CRISC, or ISO 27001 Lead Auditor

Overall Objectives of Job

• Design and implement information security policies, standards, and guidelines that align with industrys best practices and regulatory requirements.
• Evaluate, recommend, develop, monitor and maintain security policies, procedures and systems
• Ensure that security architecture, controls, processes, policies and procedures are aligned with regulatory and data protection requirements, security standards and requirements for business continuity, IT service continuity and disaster recovery
• Act as the primary liaison for internal and external compliance audits, translating technical requirements into actionable business insights.
• Systematically assess the effectiveness of security controls in all services provided by Allianz, its partners and third-party providers
• Define and conduct information security training and awareness campaigns, promote knowledge and awareness of security requirements and processes
• Work closely with IT and other departments to implement security measures and ensure the security of all systems and applications.
• Manage security risks and their related assessments, identify deviations from security policies and guidelines and develop effective strategies to mitigate identified risks or deviations
• Stay current with the latest security trends, threats, and technology solutions. Recommend and implement new security technologies as needed.
• Cooperate closely with the local CISOs / Information Security function of the global Allianz operating entities and support the implementation and maintenance of the local information security management systems
• Collaborate closely with business units and other key functions across the group to ensure effective steering and governance of all Allianz entities in alignment with Group Information Security Policies
• Advise and support the Business Owners, IT and IS function in mitigating IT security vulnerabilities
• Conduct reviews and interviews on Information Security compliance assessments across Allianz entities globally.
• Lead the ongoing, proactive monitoring and reporting of non-compliances and control deficiencies related to Information Security risks (security control test of design and test of effectiveness)
• Enhance information security awareness among Allianz operating entities' workforces.

Qualification & Experience

Education: Graduate/Postgraduate 

Experience & Skills:

• Bachelors degree in computer science, Information Technology, Cybersecurity, or a related field.
• Professional certifications such as CISM, CISA, CRISC, or ISO 27001 Lead Auditor are highly desirable.
• Practical experience (8+ years) in implementing and reviewing Information Security governance and management systems.
• Experience in implementing regulatory and industry frameworks regarding Information and Cyber Security
• Applying analytical thinking, methodological and conceptual as well as consulting skills
• Understanding the security architecture and technical platforms
• Proven track record in working within large and diverse international organizations.
• Fluent in English; proficiency in a second major language (e.g. German, Italian, French) is a plus.
• Proven track record in strategic management and monitoring within large multinational environments, with experience in leading without authority.
• Experience in Information Security Audit, Compliance and the use of Governance, Risk and Compliance (GRC) tools
• Background in project management, or consulting, particularly with a focus on Information Security, is a plus.
• Strong analytical skills complemented by excellent soft skills.
• Strong problem-solving skills combined with a big-picture mindset and creativity to develop innovative, effective solutions.
• Ability to communicate complex topics clearly and concisely to key (senior) stakeholders.
• Proven ability to work effectively with international teams and across diverse cultures.