Information Security Manager Resume

PROFESSIONAL EXPERIENCE

Information Security Manager

Confidential

Responsibilities:

Ensuring dat security strategies are aligned wif business requirements
Implementing, reviewing and monitoring of HIPAA security requirements and controls into the business operations
Ensure dat security incidents/events are identified/reported/managed as per organizational and regulatory requirements (HIPAA/PCI)
Collaborate and carry out risk assessment of operational work, business continuity
Carry out ongoing security awareness related to ISMS and HIPAA requirements
Supporting implementation and manage SOC1/SOC2 audits from security aspects

Carryout internal audits

Requirements:

Responsibilities:

Information Security Audit Planning, Execution, Audit Documentation and Reporting
IT Risk assessment and review of IT General Controls
ISO 27001 standards based Information security management system (ISMS) build and implementation
Information Security Policies, Procedures and Standards design/review
Compliance Audits (SOX.ISO27001, SSAE 18, SOC1/SOC2)
Exposure to Best Practices such as ITIL, COBIT, PCIDSS and COSO framework
Responding to RFPs on security requirements in contract
Information security risk assessment, treatment and management aspects
Ability to handle security incidents and investigations.

TECHNICAL SKILLS

In - depth knowledge of HIPAA security and other regulatory requirements and implementationTechnology Knowledge
Network security and OS Level Auditing Skills
Vulnerability Assessment and Penetration Testing knowledge
Secure Architecture Design and Implementation.
Implementation/auditing of IAM, Firewalls, IDS, IPS, VPN, Authentication mechanisms, assessment tools, etcEnterprise Architecture
Business / IT alignment
Cloud Computing,Skills
Project Management Skills
TEMPHas to be a versatile Team player
Aptitude to learn new technologies
Constant learning
Excellent Communication Skills
Auditing skills Certifications preferred - one or multiple
CISA, CISSP, CISM, ISO 27001:2013 Lead Auditor/implementer