Information Security Engineer

About the role

Information Security Engineer within the Information Security Group at Infosys Ltd. in Bangalore. The role involves reviewing the implementation of the information security control framework, conducting risk assessments, and performing ISG-driven internal SPOT checks. Day-to-day work includes handling contractual, regulatory, and compliance requirements such as ISO27001, SSAE16, PCI DSS, and HIPAA, analyzing data to generate risk metrics, and conducting awareness sessions.

What you’ll do

• Be a reviewer for implementation of the information security control framework by working with all relevant stakeholders
• Conduct and draft information security risk assessment
• Conduct ISG driven internal SPOT checks
• Help and support implementation of all the contractual requirements within the engagement
• Handle various standard, regulatory and compliance requirements such as ISO27001, SSAE16, PCI DSS, HIPAA etc.
• Analyze data generated during ongoing information processing activities to generate metrics that indicate the level of risk
• Conduct awareness sessions within Infosys
• Verify compliance to contractual requirements within the engagement

What you’ll bring

• Engineering Graduate or equivalent with 2 to 4 years of experience, or Post Graduate with 2 years of experience
• Hold ISO 27001 Lead Auditor or Lead Implementer certification
• Knowledge of Networks & Information Security
• Knowledge of Wireless Technologies
• Knowledge of Standards and Protocols
• Ability to review implementation of the information security control framework with stakeholders
• Ability to conduct and draft information security risk assessments
• Ability to handle standard, regulatory, and compliance requirements such as ISO27001, SSAE16, PCI DSS, HIPAA

Skills

Education

Engineering Graduate or equivalent with 2 to 4 years of experience/ Post Graduate with 2 years of experience