About the role
Responsibilities:
- IT and security governance, risk, and compliance frameworks and practices (e. g., COBIT, NIST CSF, ISO).
- IT and security risk and security controls (e. g., cybersecurity, network, infrastructure, applications, and projects).
- Internal control implementation, including the evaluation of the design and operating effectiveness of controls.
- Advanced knowledge of testing techniques and data analysis principles, as well as the ability to interpret results.
- IT and security audit, risk, and compliance.
- Identifies security risks that pose a threat to the company's operations.
- Partners with internal teams to develop plans for risk reduction associated with gaps identified.
- Knowledge of security frameworks such as ISO or NIST.
- Recommends administrative and technical controls to mitigate risks.
- Partners with internal teams to develop plans for risk reduction associated with gaps identified.
- Track, report, and ensure the status of security exceptions by line of business.
- Perform risk assessments and document and track findings through resolution.
Requirements:
- Proficiency with GRC systems.
- Advanced knowledge of testing techniques and data analysis principles, as well as the ability to interpret results.
- Qualification: B. E. / B. Tech / M. E. / M. Tech / MCA / M. Sc.
- Minimum of 3 years of relevant experience and a maximum of 5.5 years of total experience.
- Mandatory experience of 3-5.5 years of experience managing security Control implementation and audits, such as ISO 27001 including preparing control owners for audits, interpreting control requirements, reviewing control evidence for appropriateness, testing control effectiveness, presenting control evidence to external auditors, and audit planning with external auditors.
- Must possess excellent (English) written and verbal communication skills and be capable of creating clear, well-written documentation, recommendations, and reports/communications.
- Has sufficient experience and knowledge to plan and execute work with limited direction and supervision.