Manager IT Info Risk & Security

Job Title: Manager IT Info Risk & Security

Exp 6 to 10 years (Max)

WorkLocation:Bangalore,India

Job Type: Permanent

YourRole

Lipton is a global organisation with operating in over 100 countries. The information security department is responsible for ensuring the protection of every aspect of the IT business. This includes intellectual property from R&D, OT systems in manufacture and supply chain, Personal and confidential business data in each region, plus our customer data and PCI infrastructure for our online and physical stores.

You are responsible for delivering compliance to internal and external standards, frameworks, and attestations. You will be working across the business units, providing them regional and international risk and regulatory guidance. As an experienced Information Security & Risk Manager you will have a good understanding of IT controls and risk management. With an

exceptional level of attention to detail you will be an expert in data privacy and data protection, which is supported by your robust GDPR knowledge and ISO27001 implementation experience. In addition, you will oversee technical design reviews and be a member of the change control board.

You will be required to support the CISO and deputise in their absence. Plus, occasionally perform additional duties. Such as, incident response, technical design reviews, training, and awareness.

YourKey Tasks

• Manage incident response and investigations to assess and contain damage.
• Provide reports on, KPIs, third party risk, risk register, industry events, gap analysis, and roadmap maturity progress.
• Develops and maintains the strategic risk register.
• Develops, maintains and delivers effective InfoSec Policies, Standards and Procedures of the ISMS to mitigate risks and vulnerabilities.
• Drive the implementation of our ambitious information security roadmap and support the CISO.
• Responsible for managing Information Security Risk, Compliance, and Assurance activities.
• Manage and maintain a Information Security & Risk framework.
• Support the information security team.

Skills and Experience

• Experience designing and delivering secure technology solutions.
• Proficiency in information security domains, including policies and standards, risk and control assessments, access controls, regulatory compliance, technology resiliency, risk and control governance and metrics, incident management, secure systems development lifecycle, vulnerability management, and data protection.
• Strong reporting, analytical skills, including demonstrated experience identifying and quantifying risk and providing effective resolutions.
• Experience in a senior compliance or information security role.
• Proven track record of appropriately managing security and risk related incidents.
• Experience of ServiceNow IRM is important.
• Knowledge of Azure Security.
• Vendor Management

Qualifications

• Information Technology, or related degree (Required)
• CISM (Desirable)
• CISSP (Desirable)
• CRISC (Desirable)
• ISO27001 Lead Implementor (Desirable)