Sr Manager - Compliance, Information Security

Designation / Role : Compliance – Senior Manager

Experience : 12 to 15 years of experience in Compliance, Information Security and BCM Domains

Department : Compliance & Information Security

Work Timing : 9 hours / day; 5 days a week flexible shift timing between 10 am to 12 am IST. Should be ready to work as per US / UK shift timings as and when needed.

Qualifications : Graduate / B.E.

Professional Certifications : ISO27001 Lead Auditor / PCI DSS / CEH-EC council / CISA.

Key Skills : ISO 27001 : 2022 (ISMS), HIPAA, SOC 2 Type II, HITRUST, PCI DSS, VAPT and Cyber Security Assessments, Vulnerability Management, Third-party Risk management, Creating New Policies / SOPs, Filling the client questionnaire, Dark Web Monitoring, and Attack Surface Monitoring.

Experience

• Mandatory
• Expertise working with ISO 27001 : 2022, PCI DSS Certifications and HIPAA Assessments.
• Internal and External audit experience of ISO standards ISO 27001.
• Sound knowledge and audit experience of HIPAA compliance and HITRUST requirements.
• Good hands-on experience in VAPT, Vulnerability management, Dark Web Monitoring, Attack Surface Monitoring, and cyber security management.
• Should have hands-on experience in responding to Client’s RFP questionnaires / documents and performing Third-party Risk Management.
• Should have hands-on experience working on SOC 2 Type II / HITRUST / PCI DSS certification requirements.
• Good knowledge of basic ITGC controls / Information Security.
• Good written and verbal communication skills.
• Experience in coordinating with vendors, external auditors and internal stakeholders for different compliance and information security tasks.
• Experience in handling cybersecurity audits / assessments.
• 12+years of relevant experience in the same field.
• Desired
• Certified Lead Auditor for ISMS and Certified PCI DSS implementor.

Job Summary :

Compliance and Information Security Senior Manager will be a part of the core compliance team and will help drive, manage, implement, and evaluate the certification and compliance standards Infinx is certified for i.e., ISO 9001, ISO 27001, HIPAA, SOC2, VAPT, PCI DSS, HITRUST, Cyber Security Assessments, Dark Web Monitoring, Attack Surface Monitoring, VAPT Assessment, Third-Party Vendor Management, and Filling up of client security questionnaires / RFP documents.

Duties and responsibilities :