Information Systems Security Officer

Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust.

Key Responsibilities:

• Develop and enforce information security policies and procedures in alignment with group policies and organizational security standards.
• Identify, assess, prioritize, and report security vulnerabilities across IT infrastructure, endpoints, networks, and applications.
• Prepare and publish weekly and monthly vulnerability reports, tracking remediation progress and outstanding risks.
• Conduct periodic information security risk assessments and recommend appropriate risk mitigation strategies and security controls.
• Coordinate with internal stakeholders and global CERT teams to manage security incidents and ensure timely resolution.
• Monitor emerging cyber threats, security advisories, and CERT digests, and communicate relevant security updates to employees.
• Conduct security audits and compliance assessments, ensuring adherence to ISO 27001 and applicable security requirements.
• Review and reconcile privileged user access quarterly, maintaining the security exception tracker and following up until closure.
• Assess third-party vendors' security posture and provide information security guidance for projects across business units.
• Develop and deliver information security awareness training, communication materials, and employee education initiatives.
• Consolidate security data and maintain monthly reporting dashboards; knowledge of Power BI and Python scripting is preferred.
• Collaborate with global security teams, IT infrastructure, and business stakeholders, maintaining documentation, meeting minutes, and action trackers.

Education & Experience:

• Education: B.Tech. in Computer Science (CS) or Information Technology (IT).
• Experience: 10 - 12 years in information security, cybersecurity, IT infrastructure, or Governance, Risk & Compliance (GRC).

Key Skills & Competencies:

• Information Security Governance, Risk & Compliance (GRC).
• Vulnerability Assessment, Risk-Based Prioritization, and Remediation Tracking.
• ISO 27001, ISMS, Security Audits, and Compliance Management.
• IT Infrastructure, Active Directory, and Endpoint Troubleshooting.
• Security Incident Management and CERT Coordination.
• Privileged Access Management and Security Controls.
• Security Reporting, Data Analysis, and Power BI Dashboards.
• Basic Python Scripting and ITIL V3/V4 Knowledge.
• Security Awareness Training and Threat Intelligence Communication.
• Analytical Thinking, Problem-Solving, Stakeholder Management, and Effective Communication.

Preferred Certifications:

ISO 27001 Lead Auditor, CISM, or CEH. ITIL V3/V4 certification is an added advantage.

At Thales, we’re committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you’ll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference – for a safer, greener, and more inclusive world.