Research and develop paradigms / models for security posture assessment of organizations in critical infrastructure sectors considering industry / sector-specific compliance standards, regulations, policies and laws, determining business goals / corporate objectives of such organizations and bridging those with their IT operations and cybersecurity needs.
Responsibilities
- Determine performance scores of organizations based on verification of evidence obtained from sites and determine their cyber security maturity levels.
- Assess the objective evidence as per the cyber security audit checklist.
- Research of Cyber Security frameworks, paradigms / models, industry standards/policies/laws in order to design and develop Cyber Security Capability Maturity Models for organizations.
- Collaborate with Subject Matter Experts (SMEs) for expert opinion, review and update of the models.
- Progressively elaborate on the development of the models across sectors from common criteria to sector-specific criteria.
- Demonstrate to relevant stakeholders from various organizations in the critical sector, validate and refine the models on an ongoing basis.
- Determine performance scores of organizations based on verification of evidence obtained from sites and determine their cyber security maturity levels.
- Assess the objective evidence as per the cyber security audit checklist.
Eligibility
- M. Tech / M.C.A. / M.E in Computer Science, Computer Engineering, IT, Electronics and / or related degree with research / work experience in cybersecurity.
- Minimum 3 years of related research / work experience in cyber security domain, preferably with experience and knowledge in the GRC domain.
- Ability to coordinate of all activities related to the Information Security Management System (ISMS) audit.
- Experience on Objectively assess a company’s operational/business processes and operations for improving Information Security.
- Passionate, self-motivating, research oriented, expert level cyber security professional to work in Cybersecurity Research, Development and Extension (RD&E) projects of national importance.
- Demonstrated leadership in supporting research efforts in Cyber Security Capability Maturity models, frameworks, industry best practices and standards
- Ability to do independent research, as well as to work collaboratively with other team members.
- Strong understanding of industry standards/frameworks such as COBIT, NIST, GDPR, ISO 27001, PCIDSS etc or similar guidelines/frameworks release by Government of India for different critical sectors.
- Familiarity with different Capability Maturity Models such as NIST CSF, CMM, CMMI, C2M2 etc.
- Team player, confident, independent and enthusiastic.
- Excellent interpersonal skills and effective written/verbal communication skills, with experience presenting to customers.
Desired Eligibility
- Relevant certifications in Cyber Security would be a plus
Travel
- An employee must travel across the country for assessment at various organizations, validation and • building upon the models, and for project execution, monitoring, and coordination with geographically
- distributed teams as per the assigned responsibilities.
Communication
- Submit a cover letter summarising your experience in relevant technologies, processes and software along with a resume and the Latest passport-size photograph.