What are the responsibilities and job description for the Director of Cyber Security position at Sumeru Inc?
Job responsibilities
Perform security risk and compliance assessments for the security controls identified defined and to be implemented for the specific client project
Review Projects and their technical design documents for Information security risks and advise on suitable controls and mitigations at early stages of the program
Fair understanding of Technology Landscape Applications Infrastructure Cloud and review Clients information security and related threats and vulnerabilities legal and regulatory requirements
Expertise in controls testing across the domains including Patch Management Backup management Network security management Identity and Access Management Vulnerability Management Software Asset Management cyber event logging and monitoring and technology change management controls
Review and give an opinion on the control design of supplier and their organization technical specifications against Client security control requirements
Identify or design the controls for implementation based on the outcome of Risk Assessment its remediation and residual risk
Ensure all the risks are documented classified and tracked with appropriate action as per the IRM standards
Ensure all the controls outlined for an application Infrastructure are designed effectively and able to test the same and measure their effectiveness of controls using some parameters
Identify the risks in the Client Projects provide recommendations for remediation of identified risks
Assess and classify all potential business and infrastructure information risks
Job Qualifications
Bachelors degree in Computer Science Information Technology or related field
8-10 years of experience in GRC
Good Understanding of Security Standards like ISO 270012 NIST CSF NIST 80053 and PCI
Excellent communication and troubleshooting skills
Ability to work independently and in a team environment
Strong organizational and analytical skills
Familiarity with audit requirements and processes
Knowledge of scripting languages is a plus
Certification is mandatory
Handson Experience with tools like
Catachi Cos Complianceai
BigID
OneTrust
StealthINTERCEPT
