IT Information Security Specialist

Company Name: OSN Employment Type: Full Time Monthly Salary: Unspecified Minimum Work Experience: 5-10 Years Minimum Education Level: Bachelors Degree Listed By: Employer Career Level: Mid-level Description: Description Job Purpose To manage, review and monitor entire IT infrastructure and ensure its compliance with security regulations, organization security policies and PCI requirements. Conducting periodic in-depth security risk assessments for IT infrastructure, access reviews for applications and systems. Communicate information security compliance status to senior leadership team on a regular basis through reports and presentations and recommend areas for improvement on a regular basis. Provide periodic security awareness training to OSN staff on information security and PCI. Create IT security and governance policies and procedures as required. Ensure that information security KPI's targets are met, develop tools and techniques for measuring the effectiveness. Keep track of emerging threats and liaise with teams and IT stakeholders for mitigating them on priority. Design, implement and maintain controls to safeguard OSN data from all internal and external threats. Key Accountabilities Planning & Organization Ensure that the all the security controls are functional at all times Implement mitigations for the vulnerabilities identified by internal and external scans Safeguard OSN data from internal and external threats Develop controls to mitigate the process gaps identified in the information systems and practices Continuously upgrade knowledge in the field of information and IT security Handle complex data sets in excel and preferably in databases Requirements Qualifications, experience, skills and competencies Experience required: 8+ years of IT security and information security related experience Education requirement: Technical Bachelor's Degree with the required experience Should be certified - CISSP Should have compliance related certification from PCI Certification to demonstrate technical expertise in IT security Knowledge & Skills: Expert knowledge in enterprise network security products including Next generation network / application firewalls, IPS, cryptographic suites. Knowledge on cloud security standards Detailed knowledge on information security standards, PCI, CoBIT and NIST 800-30 In-depth knowledge on data security standards and processes Knowledge on web applications scanners, and vulnerability assessment and remediation tools Knowledge on monitoring platforms like SIEM