Roles & Responsibilities:
• Perform internal audits and ensure compliance with policies and external laws.
• Maintain the audit calendar & program and provide periodic reports to stakeholders.
• Improve reporting mechanisms for the audit function.
• Track remediation of any findings from internal or external assessments.
• Manage the audit risk assessment program minimize.
• Contribute to the data risk management program.
• Support the team in risk management activities organization.
• Assist with successful implementation and enforcement of security policies and procedures across old & new technologies / systems/ environments.
• Participate in the implementation of security initiatives.
• Support team to implement the GRC initiatives with respect to audit programs.
• Must have working knowledge of GDPR, Implementation, SOC2, ISMS.
Mandatory skills:
• Information Security, Risk, IT GRC, Audit.
• 7+ years in an Information Security role with progressive experience in the following areas:
• Audits and assessments - information security, network security, application security, physical security, privacy etc.
• Information or IT risk management and compliance
• Knowledge of various standards like ISO 27K, COBIT, PCI-DSS, NIST, IT GRC etc. exposure to regulatory audits will be an added advantage.
• Understanding of Privacy regimes
• Application Security concepts from an audit perspective
• MS Office (Word, Excel, PowerPoint)
• Excellent organization, communication, and presentation skills with the right attitude
• Ability to multi-task
• General professional writing proficiency
• Experience in the services industry is mandatory.
• ISO :2022 Certification Mandatory, CISA/CISM preferable but not mandatory.
• Having exposure on vendor & client management
• CISO responsibilities: Experience in developing CxO level dashboards , Cybersecurity Knowledge | Leadership and Management | Risk Management | Security Strategy and Planning