Job description
- Experience in Risk Management / Information Security or auditing.
- Ability to communicate risk at all levels of management up to and including C-Level executives.
- Translate business, industry, and regulatory requirements into information security objectives and associated tactical / strategic information security initiatives
- Expertise in the domain of Risk, Compliance & Governance
- Technical expertise related to Cyber Security risks, IT Risks , Privacy , BCM
- Possesses a good technical awareness and the aptitude to remain up to date with information security and IT developments
- Industry specific Knowledge related to Application Development / Infrastructure Management / Enterprise Risk Services / Business Process Outsourcing will be an added advantage.
- Required to have excellent understanding of the control frameworks used during risk assessments and control selections for both IT and Non-IT domains.
- Working knowledge of compliance programs such as PCIDSS, HIPPA, ISO 27001, SOC2, SOX, NIST, FISMA, COBIT. Any hands-on experience of conducting such assessments will be an added advantage.
- To ensure LoB specific risks are understood , communicated and minimized
- To support / guide Delivery Leadership in case of any incident
- To take up special projects to enhance R&C
- Provide LoB Focused Risk Management and Reporting
- Proven ability to lead teams dedicated to the performance of risk management and assessment responsibilities.
- Develops and provides appropriate guidance on solutions to mitigate risks and enhance system security.
Skills Required
Auditing, compliance monitoring , Team Management, iso standards, Project Management, Data Analysis, Process Improvement, Quality Control, Risk Management, Report Writing