Min 12 + yrs of hands on experience into information and Cyber Security.
You have toget a complete pictureof the company's technology and information systems.
For all IT initiatives, you have toplan, investigate, and build reliable, powerful, and flexible security architectures.
You need to have deep understanding about security architecture , Risk management , threat management , detection and response, VAPT and security assessments, on the complete infrastructure and applications.
You have good understanding of security frameworks like NIST , ISO27001 , PCIDSS and others security standards.
You have to make sure that all workers follow the necessary corporate security policies and procedures that are defined, developed, implemented, and maintained for a seamless workflow.
You have toprepare the cost estimates and other potential integration concernsfor all cybersecurity measures.
You have totest and ensure that the organization's final security mechanismswork as expected.
You have toquickly respond to any security-related issues(e.g., data breaches, viruses, phishing scams) and give a thorough post-event study once the situation has been resolved.
You ought toupdate and upgrade the organization's security systemswhen required.
You should have expertise in security measures such as firewalls, intrusion detection, and prevention systems (IDS/IPS), network access controls, and network segmentation.
You must be experienced with operating systems like Windows, Linux, and UNIX.
Network security architecture and its development are both important to understand.
Wireless security, such as routers, switches, and VLAN security, is something that everyone should be aware of.
DNS security principles such as routing, authentication, VPN, proxy services, and DDOS mitigation technology are all covered.
An understanding of the ISO 27001/27002, COBIT, and ITIL frameworks are required.
Third-party auditing skills and cloud risk assessment methodologies.