Job Description

Job Family Descriptor

Experience
1. Overall experience - Min 12-15 years
2. Relevant experience - Min 8-10 years
Skills:
1. Communication including presentation.
2. Collaboration with multiple stake holders
3. Ability to corelate & articulate
4. Risk based thinking.
5. Strong working knowledge in information security and its controls, regulations, Privacy laws, auditing etc
6. Experience in writing/ developing documentation
7. Experience responding to, analyzing, and communicating information security incidents.
8. ability to work in multicultural and diverse environments

Certification :
1. Certification related to information security or GRC is mandatory.
(CISA/COBIT/CISM etc)
Roles & Responsibilities:
1. Implementing, managing, reviewing and improving internal controls for governance, compliance and quality, IT audits, or assurance and risk management programs
2. Manage internal audit program including auditing
3. suggest/advise the management regarding the business risks and provide mitigation plans
4. Manage the implementation of security programs & IT security governance in the organization.
5. Provide support to Business during RFP stage to understand the customer requirements and
Share inputs regarding compliance to the clauses (information security , business continuity, Privacy etc)
6. Accountable for ensuring all the essential guidelines are put in proper place accurately adhering to industry/legal rules and regulations
7. Highly skilled in designing and implementing compliance and control frameworks.
8. Most of the rules, regulations, and policies within the organization need detailed analysis. It\'s essential to pay attention to all the minute details.
9. Develop and implement effective and reasonable policies and practices to secure protected and sensitive data and ensure information security and compliance with relevant legislation and legal interpretation.
10. Execute strategy for dealing with increasing number of audits, compliance checks, external assessment processes ISO 27001, ISO 27701, BS10012, Cloud security, ITIL, COBIT etc
11. Require leadership and project management experience, as well as expertise to ensure effective system-wide security analysis; intrusion detection; standards and testing; risk assessment; awareness and education; and development of policies, standards and guidelines.

Purpose - Broad objective of the role

Operating Network - Key External

Operating Network - Key Internal

Size and Scope of Role - Financial

Size and Scope of Role - No. of direct reports

Size and Scope of Role - Total team size

Size and Scope of Role - Other size parameters

Minimum qualification & experience

Other knowledge/skills

Key Responsibilities

Technical Competencies

Knowledge / Skills

Broad outline of the Role

Drive the execution of plans policies and processes with in a team drive operational activities in the respective area of corporate service lead and drive execution of projects such as infrastructure projects etc Support the team to optimize reduce operating costs across facilities travel etc through efficient processes make it A Great Place to Work Support the Travel Hospitality Telecommunication requirements of employees in the Country and international employees to that country Focus is on implementation and control as well as policy development Operational role responsible for delivering results that have direct impact on the achievement of results within the job area and may also impact a wider operational area Self sufficient capable of identifying key issues and priorities and focusing on these to deliver required results with minimal direction and supervision Able to identify problems and significantly improve change or adapt existing methods and techniques Might lead mentor small teams Education Graduate Experience 5 10 years

Tata Communications