Specialist - Security and Privacy @ Philips India

Specific job responsibilities include:
Assess the security for software/Product security and Privacy compliance
Implements security controls, risk assessment framework, and program that align to regulatory requirements,
Assist Philips business units in the development and implementation of product security and Privacy practices including policies, standards, guidelines, and procedures.
Participate in, release Plan events, Scrum meetings, Product demos, product design and architectural discussion to ensure Security and Privacy throughout the development lifecycle
Verify that security and privacy requirements defined in the security plans, policies, and procedures are followed and protection measures are functioning as intended.
Conduct security and privacy reviews to determine compliance.
Guide the business unit in their management of the resolution of security audit or review findings.
Provide security risk management and security advice as well as advice on strategic direction relating to product and information security.
Work with deployment/operations information security officer to proactively and cooperatively communicate and mitigate risks.
Assist with security incidents and review risk and impact of breaches to protected systems.
Participate in architecture and design of services providing information and product security advice.
Review proposed services, engineering changes, and feature requests for security implications and needed security controls.
Ensure risk reports and KPIS to the management

Required experience ~5-8 years of security experience(for Specialist) and 10 to 12 for Senior Specialist role, including responsibility for the security of a software application and/OR IT infrastructure including defining roadmap
Product/Information security experience in all phases of Products development and deployment including architecture, design, development, and operational maintenance
Incident management, including analysis and response
Experience in designing security solutions.
Experience in assessing security of-iaas, paas, saas platforms would be helpful
Global working experience in enterprise application development & Cloud Computing
Technical leadership experience in the Software Security field.
Experience and knowledge of penetration testing methodologies and tools.
Conducting information security analyses, audits, and reviews
Preferred experience Experience in the healthcare sector and HIPAA
Experience leading change management systems
Experience with NIST 800-53, HIPAA, GDPR, ISO-27000
Required skills Excellent Cyber Security capabilities
Exposure to privacy requirements
Up to date knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities
Excellent communication and leadership skills
Strong interpersonal skills with the ability to facilitate diverse groups, help negotiate priorities, and resolve conflicts among project stakeholders

Preferred certification/s Certifications in security OR privacy demonstrating deep practical knowledge such as CSSLP, CISSP, CISM, CIPP, CIPT, CIPM, CISA or SABSA