Job description

Research and develop paradigms / models for security posture assessment of organizations in critical infrastructure sectors considering industry / sector-specific compliance standards, regulations, policies and laws, determining business goals / corporate objectives of such organizations and bridging those with their IT operations and cybersecurity needs.

Responsibilities

Determine performance scores of organizations based on verification of evidence obtained from sites and determine their cyber security maturity levels.
Assess the objective evidence as per the cyber security audit checklist.
Research of Cyber Security frameworks, paradigms / models, industry standards/policies/laws in order to design and develop Cyber Security Capability Maturity Models for organizations.
Collaborate with Subject Matter Experts (SMEs) for expert opinion, review and update of the models.
Progressively elaborate on the development of the models across sectors from common criteria to sector-specific criteria.
Demonstrate to relevant stakeholders from various organizations in the critical sector, validate and refine the models on an ongoing basis.
Determine performance scores of organizations based on verification of evidence obtained from sites and determine their cyber security maturity levels.
Assess the objective evidence as per the cyber security audit checklist.

Eligibility

M. Tech / M.C.A. / M.E in Computer Science, Computer Engineering, IT, Electronics and / or related degree with research / work experience in cybersecurity.
Minimum 3 years of related research / work experience in cyber security domain, preferably with experience and knowledge in the GRC domain.
Ability to coordinate of all activities related to the Information Security Management System (ISMS) audit.
Experience on Objectively assess a company’s operational/business processes and operations for improving Information Security.
Passionate, self-motivating, research oriented, expert level cyber security professional to work in Cybersecurity Research, Development and Extension (RD&E) projects of national importance.
Demonstrated leadership in supporting research efforts in Cyber Security Capability Maturity models, frameworks, industry best practices and standards
Ability to do independent research, as well as to work collaboratively with other team members.
Strong understanding of industry standards/frameworks such as COBIT, NIST, GDPR, ISO 27001, PCIDSS etc or similar guidelines/frameworks release by Government of India for different critical sectors.
Familiarity with different Capability Maturity Models such as NIST CSF, CMM, CMMI, C2M2 etc.
Team player, confident, independent and enthusiastic.
Excellent interpersonal skills and effective written/verbal communication skills, with experience presenting to customers.

Desired Eligibility

Relevant certifications in Cyber Security would be a plus

Travel

An employee must travel across the country for assessment at various organizations, validation and • building upon the models, and for project execution, monitoring, and coordination with geographically
distributed teams as per the assigned responsibilities.

Communication

Submit a cover letter summarising your experience in relevant technologies, processes and software along with a resume and the Latest passport-size photograph.

Someone shared one job with you. ASAI keeps finding the rest.

Scored, not searched. Every role ranked against your actual profile.

Alerts as often as hourly. Reach new roles while the pile is still small.

Skill gaps, spelled out. See exactly which requirements you don't meet yet.

Verified jobs, only. Say no to ghost jobs. Your time deserves respect.