Act as a Trusted Cyber Security Advisor to the CxOs, in the assigned accounts / set of accounts
Responsible to build relationship with all the key stakeholders, both from s Ecosystem and the Client Ecosystem.
Responsible to Define information security strategies, including guiding principles and future state vision, ensuring that the strategic objectives are aligned with business goals
Responsible to Developing and embedding IT security systems architecture to support that strategy
Assessment of security architecture, analysis of issues and development of recommendations for their resolution
Defining key initiatives that will be incorporated in any strategic roadmap, including key drivers, benefits, objectives and deliverables, in collaboration with business and IT stakeholders
Responsible to develop and evangelize value propositions,
Responsible to build, produce and present reports and other client deliverable, as required.
Practice Development : Work with the Consulting head / Managing Partner to define new strategies, develop and evangelize value propositions to existing and new clients
Reviews and assesses a clients business strategy, including ambitious positioning, strategic direction & proposes appropriate remodeling solutions
Generates demand through consultative selling with Government / BFSI / ENU / Manufacturing sectors
Collaborates with Sales Teams and account managers on business development plans and meets the sales targets set in objectives.
Plans the strategy and direction for key client engagements
Ability to generate multiple million $ pipeline with pro-active initiatives
Job Requirement:
Develop association with the customers Information Security head and is seen a trusted advisor of the Customer CISO
Maintain strong client focus by building relationships with clients, scheduling and conducting key client meetings.
Interact with customer and articulate requirements
Ability to advise the customer on future trends to improve their Security Posture
Advise on Risk mitigation an remediation plans
Analyze solution options and recommend the preferred option
Make presentations to customer and internal stakeholders on compliance and remediation
Knowledge and experience of Risk Management, IT Governance, and Information Security best practices, standards and frameworks like ISO 31000, ISO 27001, ISO 27005, NIST, COSO and COBIT
Ensure that delivery team implements the customer organizations information security policies and procedures are they adhered to while delivering services through periodic control testing
Monitor compliance with the customer organizations security policies and procedures among employees, contractors, alliances and other third parties and takes corrective action.
Correlate security incidents and review the risk and advice on control adequacy and/or on remediation
Review and advice on s DR plan for the offered services on adequacy and accuracy
Provide a dashboard to the customer and delivery team Compliance, Remediation plan, DR readiness, open risks etc.
Knowledge and experience of Risk Management, IT Governance, and Information Security best practices, standards and frameworks like ISO 31000, ISO 27001, ISO 27005, NIST, COSO and COBIT
Knowledge and experience in Technology Risk Management
Knowledge of various security technologies and leading product families
Experience/understanding of ITIL process to understand the operations of team
Ability to review the security architecture and advise on the security requirements
Demonstrated aptitude towards problem identification, resolution and comprehension and interpretation of technical procedures.
Strong Interpersonal skills to interact in team environment and foster client relationships
Good written, communication, presentation skills including documentation of findings and recommendations
Qualifications
Must have been a Consulting Partner in the Security & Risk Management consulting domain for a minimum of 5+ Years.
Must have specialization in the domain of Cyber Risk Management Consulting
Must have expertise on one of more of the following domains of Risk Management:- IOT, Digital, Cloud, Enterprise Risk
Must have 15+ years of experience in the domain of Security & Risk Management
Must have a Strong understanding of IT infrastructure concepts and architectures, including IT network, operating system, middleware configurations and the OSI model
Designing and/or implementing IT security strategy in an enterprise
Carry out Risk Assessments related to Cyber Security Posture of Enterprises,
Risk Assessments and Gap Analysis of Networks, Cloud, Data Center infrastructure w.r.t standard frameworks like ISO27K1, PCI DSS, NIST frameworks.
Carry out Compliance Reviews for GLBA, SOX, HIPAA, ISO 27K1 and industry specific regulations such as FFIEC for Financial Institutions
Lead initiatives for (Re)Architecting and (Re)Engineering of Controls to enhance the Security Posture of the enterprise
Lead Process (Re)Engineering initiatives of key processes related to Security Management leading to Process Improvement and Operational Reviews
Experience with solutions and products in the following IT security domains:
Perimeter & Network Security
Malware Monitoring, Detection and Protection
Incident Response
Security Baselining & Change Management
Data Governance, Privacy, Protection and Security
Identity Life Cycle Management
Cloud Security and Risks Management
Cyber Security, Cyber Defense
Business Continuity Management
Build, Develop and Sustain relationships with clients and participating in networking/business development activities
,
Employement Category:
Employement Type: Full time Industry: Management Consulting / Strategy Role Category: Operations Management / Process Analysis Functional Area: Not Applicable Role/Responsibilies: Consulting Partner - Cyber Security