Job Description

About us


AQM Technologies PVT LTD (AQM) established in the Year 2000 with a mission to make testing experience a \xe2\x80\x9cHAPPY TESTING\xe2\x80\x9d experience for all our stakeholders, our employees by allowing them to acquire new skills, and providing them with challenging assignments . Our Promise to our customers is Bug Free Software.


Program Manager- InfoSec
Reporting to CEO/ HOD- InfoSec
The Program Manager must be able to translate the IT-risk requirements and constraints of the business into technical control requirements and specifications, as well as report on ongoing performance.
The individual would serve as the process owner of all assurance activities related to the availability, integrity and confidentiality of customer, business partner, employee and business information in compliance with the organization\'s information security policies.

Work with executive management to determine acceptable levels of risk for the organization. The individual must be highly knowledgeable about the business environment and ensure that information systems are maintained in a fully functional, secure mode.

The individual will play a central role in in VAPT programs, Application Security Vulnerability Mitigation and drive the closure of reported vulnerabilities.
Technical Responsibilities
Ensuring contemporary technology and security in the client ecosystem including network and application security, infrastructure hardening, security baselines, web server, and database security.
Work with the internal and external stakeholders from vulnerability identification stage through fix implementation in production environment to ensure the security posture of the customer is maintained as per the defined standards.
Responsibilities

• 
  Involvement in Security Assessment and Testing.
• 
  Closely work with Information Security Group while publishing new true positive & valid vulnerabilities.
• 
  Identifying false positive vulnerabilities from the scan report prepared by Information Security Group
• 
  Validate and test effectiveness of compensating controls and implement as applicable Providing relevant information for Internal & external Audits.
• 
  Involvement in the solutioning activities
• 
  Providing Application Vulnerability Remediation, Data Security solutions, Implementing cyber security solutions
• 
  Assess and mitigate vulnerabilities of security architectures, designs, and solution elements in Web-based systems, Database security and Distributed systems.

Perform Due Care - Periodic reporting of Vulnerability Assessment and Application Security Assessment status to all Sr. Management & Stakeholders.
Participate in ongoing IT Security measurements and reporting for senior management review.
Assist in coordinating contingency plan tests on a regular basis.
Perform Due Diligence

• Implement Risk Management concepts like Identifying threats and vulnerabilities, Risk assessment/analysis, Countermeasure selection, Control assessment, Monitoring.
• 
  Determine and ensure implementation of data security controls for data at rest and data in transit

Program management

• 
  Communicate successfully with partners and drive accountability across teams to ensure program objectives are met
  
• Should have an agile approach with capability to handle multiple projects simultaneously
  
• Gather and examine customer and internal security team needs and opportunities for new information security programs, products and projects
  
• Drive organizational needs cross-functionally including tracking and reporting of progress and metrics

• 
  responsible for complete overview and driving security initiatives across services. This includes the tracking, monitoring and influencing priority of significant security objectives, goals and plans from all security sub-departments.

Education
BE/BTech IT with CISA, CISSP, CISM certification
Experience
15-20 years

• 
  Industry
  IT Services
  City
  Mumbai
  State/Province
  Maharashtra
  Country
  India
  Zip/Postal Code
  400086