Senior Information Security Analyst

Location: Mumbai,Maharashtra,India

Company Introduction :

Cogno AI by AllinCall is an Omnichannel Cloud Communication-as-a-Service that uses a combination of ChatBots, Live Agent Chat, Cobrowsing, and Video Calling to provide a Delightful Customer Experience across all Digital Channels. We work with 90+ large Enterprise clients (ICICI Group, Kotak Group, HDFC Group, State Bank Group, Aditya Birla Group, Bajaj Group, etc). We are on a mission to build the best Communication Solutions for Businesses to help them with a delightful Customer Experience. Location: Currently remote, eventually MumbaiCompensation: As per the Industry standards Skills Required: Problem Solving, Analytics, Strategy, Planning, Effective, Communication Skills, Critical Thinking, Leadership, G-Suite, MS-Office

Position Description:

Cogno AI requires an experienced resource, to be part of Security Group, and play an integral role in the overall development and management of ISO 27001, handle VAPT vertical, and other relevant certification program such as GDPR, SOC2, PCI-DSS at Cogno AI.

Responsibilities:

• Demonstrates proven expertise and success in a role leading and collaborating directly with senior management, delivery, practice development and thought leadership related to Information Security solution development, assessment and implementation.
• Demonstrates proven expertise and success managing project work streams in system security, controls or information security management environment.
• Conduct ISO 27001 Internal Security Audits & handling external certification audits/customer audits. Closure of reported NC’s with appropriate corrective actions.
• Conducting gap assessments wrt. ISO 27001 standard & provide continuous improvement to management system
• Handling other security related projects not limited to GDPR, SOC 2, PCI-DSS & other projects as directed by Management.
• Conduct risk assessments for departments and support risk remediation
• Good Knowledge on VAPT & help team in remediation of findings
• Handling Incident Management, Media/Asset management, Change management, BCP, Patch management, Log review, Physical & HR security related requirements.
• Support the ISMS operation and associated independent security certification activities for SOC2, ISO 27001, and PCI DSS.
• Shape the strategy and direction of our security operating model, helping focus on utilising the right skill sets on the most appropriate subjects.
• Manage and evolve the GRC platform with the upkeep of information metrics and support all aspects of GRC security for key departments, as their security business partner.
• Support the transition/integration of security models associated with business acquisitions.
• Management of security KPI metrics and reporting strategies
• Delivery high-frequency communications regarding progress on security programs.
• Management of security policies and processes, to ensure operational efficiency, meeting regulatory compliance, and support for regional demands.
• Gathering, analysing and assessing the current and future threat landscape and providing a realistic overview of (local) risks and threats in the enterprise environment.
• Planning and execution of external and internal audit activities as required.
• Assisting fellow Cogno AI’s in understanding and pragmatically responding to security audit findings.
• Support sales team in completing RFP’s, participating in customer calls & provide end-end support towards on-boarding of new customers.
• Knowledge on AWS Cloud Infrastructure
• Support the CISO function to develop budget projections based on (local/regional) tactical and strategic goals and objectives.

Eligibility:

• 8+ years of experience in Information Security.
• Understanding of ISO 27001, GDPR, SOC2, PCI-DSS & other various security frameworks.
• Focused personality, with a demonstrated ability to take initiative, successfully handle and prioritize multiple competing assignments and effectively manage deadlines.
• Experience in understanding and deploying risk management frameworks
• Should hold certifications (More than 1) such as ISO 27001 LA, ISO 27001 LI, GDPR, SOC2, PCI-DSS
• In-depth understanding and hands-on experience of how information security can impact an organisation; you can give examples and explain both positive and negative impacts.
• Comfortable providing high quality updates to various levels and global audiences, including video.
• A bachelor’s degree in information systems or equivalent work experience
• Excellent communication skills in English both written and verbal.

Benefits

• Get a chance to shape your career in one of the fastest-growing spaces - Artificial Intelligence, Machine Learning, and other new-age technologies.
• Get a chance to work with some of the largest enterprise clients like ICICI Bank, HDFC Bank, Kotak Mahindra Bank, etc. and understand their business model and operations.
• Best of both worlds - Work experience of a startup and branding of Fortune 500 companies!
• Very fast-paced growth environment. You tend to learn and grow at a 2x rate minimum!
• Work with an incredible team that has created products for big BFSI enterprises (one of the toughest markets to crack!), which the customers love!
• Lots of creative freedom!
• Lots of fun at the workplace. Frequent fun activities to make work even more enjoyable :)
• Fantastic company culture. No politics. Just pure work and play!
• Very approachable and helpful seniors and peers.

Apply to this job