Manager - Information Security Analyst
PUNE, MH, IN
About Avaya
About The Opportunity
This role requirement is within the Avaya’s Corporate Security team. Corporate Security of Avaya is responsible to maintain Confidentiality, Integrity and Availability of Avaya’s and its customer’s information.
Complete the sentence: To be successful in this role you have ability be good understanding of Information Security concepts and able to deliver drive strategic delivery of solutions.
About The Responsibilities
•Review of the PCIDSS Compliance of Avaya by carrying out assessments and ensure that the PCIDSS requirements are always adhered to.
•Coordinate for PCIDSS audit, evidence tracking & closure of audit related activities.
•Review and submission of PCI Self-Assessment Questionnaire (SQA) on regular basis.
•Ensure firewall rule review, network segmentation testing, Tokenization of PCIDSS environment on regular basis.
•Provide guidance and advisory support to businesses on the end-to-end Third-Party Risk Management process.
•Assess the adequacy of a vendor’s technology controls, standards, policies, and procedures to protect Avaya information.
•Responsible for Third Party Risk Assessments and supporting the businesses with monitoring the performance of our vendors.
•Assist in ensuring compliance with relevant regulations covering third party security risk.
•Prepare reports to present it to senior management on a predetermined basis, including performance metrics and associated reporting.
•Should have hand-on experience to conduct the Audit based on security frameworks and standards such as ISO 27001/2, PCI DSS, NIST 800-53, SSAE-18 / ISAE, HIPAA and GDPR.
About The Requirements
SKILLS & COMPETENCIES
•Ability to work on PCI-DSS and 3rd party risk management.
•Should have good understanding to Risk Management.
•Good knowledge on ISO 27001, NIST 800-53, SSAE-18 / ISAE, HIPAA and GDPR.
•Experience into working on Archer modules will have added advantage.
•Soft skills required to be successful in the role and in Avaya, in line with our five key cultural principles of trust, empowerment, teamwork, simplicity and accountability
ADDITIONAL INFORMATION
•Opportunities to work flexibly and/or remotely, and this job do not require Travelling.
EDUCATION/QUALIFICATION
•Bachelor’s degree (BE - B. Tech / MCA / M. Tech/ MBA) in computer science or Electronics.
•Good to have relevant security certifications such as CISA, ISO 27001 Lead Auditor/Lead Implementer and Payment Card Industry Professional are a plus.
Experience
Education
Preferred Certifications
Footer
Avaya is an Equal Opportunity employer and a U.S. Federal Contractor. Our commitment to equality is a core value of Avaya. All qualified applicants and employees receive equal treatment without consideration for race, religion, sex, age, sexual orientation, gender identity, national origin, disability, status as a protected veteran or any other protected characteristic. In general, positions at Avaya require the ability to communicate and use office technology effectively. Physical requirements may vary by assigned work location. This job brief/description is subject to change. Nothing in this job description restricts Avaya right to alter the duties and responsibilities of this position at any time for any reason. You may also review the Avaya Global Privacy Policy (accessible at https://www.avaya.com/en/privacy/policy/) and applicable Privacy Statement relevant to this job posting (accessible at https://www.avaya.com/en/documents/info-applicants.pdf).
#LI-LC2