Job Title : Cyber Assessment Specialist.

Location : Mumbai (Work from Office).

Experience Required : 3 Years.

Availability : Immediate Joiner Preferred.

Job Description : Key Responsibilities : - Conduct comprehensive cybersecurity assessments to identify and mitigate risks to the organization's information assets.

- Develop, implement, and maintain the Information Security Management System (ISMS) in accordance with ISO 27001 standards.

- Lead ISO 27001 audits, including preparation, execution, and follow-up activities.

- Perform detailed risk assessments, identifying vulnerabilities and recommending appropriate controls to mitigate risks.

- Collaborate with various departments to develop and implement information security policies, procedures, and guidelines.

- Monitor compliance with information security policies and procedures and ensure continuous improvement of the ISMS.

- Provide expert advice and guidance on information security best practices and emerging threats.

- Prepare detailed assessment reports and present findings to senior management.

- Conduct training and awareness programs to promote a strong information security culture within the organization.

- Stay updated on the latest cybersecurity trends, threats, and regulatory requirements to ensure the organization's information security practices remain current and effective.

Qualifications and Skills : - Minimum of 3 years of experience in cybersecurity, with a focus on ISMS, risk assessment, and ISO 27001 lead auditing.

- Strong understanding of information security principles, standards, and best practices.

- Certified ISO 27001 Lead Auditor is mandatory.

- Proven experience in conducting risk assessments and developing risk mitigation strategies.

- Excellent analytical and problem-solving skills, with the ability to identify and assess complex security risks.

- Strong communication and interpersonal skills, with the ability to present complex information security concepts to technical and non-technical stakeholders.

- Proficient in using information security tools and technologies.

- High level of integrity and professional ethics, with the ability to handle confidential information.

Preferred Qualifications : - Additional certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CRISC (Certified in Risk and Information Systems Control) are a plus.

- Experience in the financial services industry or similar highly regulated environments.

- Knowledge of data protection regulations such as GDPR.

(ref:hirist.tech)