Project Manager-Information Security

1. Must have working knowledge of Risk Assessment, Vulnerability Assessment, Penetration Testing, Application Security, Baseline Review, Business Continuity Planning (BCP) and Disaster Recovery (DR).
2. Must be able to translate information security requirement into business needs and vice versa.
3. Should be able to explain the VAPT findings to technical and non-technical teams.
4. Should be able to track and coordinate with different teams to close the risk identified during VAPT exercise.
5. Must have a solid understanding of Information Security Standards and compliance like ISO 27001, PCI DSS, OWASP, NIST, SANS and CIS.
6. Must have experience with creating information security project RFPs.
7. Should be business driven with a thorough and proven understanding of client activities and products.
8. Responsible to undertake structured analysis of vendor proposals for the supply of new InfoSec solutions in close collaboration with the concerned business unit(s).
9. Responsible for the execution of projects to implement selected new InfoSec systems.
10. Responsible for the preparation of a plan for the complete project lifecycle of assigned projects and for the update of these plans during that lifecycle.