Senior ISMS Engineer

Responsibilities:

• Drive multiple complex projects and achieve key milestones, with the ability to reprioritise work in a fast-paced environment.
• Sustain effective engagement with IT, Security, and Compliance business partners, and with Auditors and Regulators.
• Must take ownership, demonstrate a sense of urgency, and ensure accuracy and quality.
• Must manage ambiguity, perform in a fast-paced environment, and resolve urgent and competing demands.
• Must support planned and unplanned workload demands, with the measured courage to say "no " to focus on key priorities.
• Perform other duties and responsibilities, as assigned.
• Identifies security risks that pose a threat to the Company's operations.
• Partners with internal teams to develop plans for risk reduction associated with gaps identified.
• Recommends administrative and technical controls to mitigate risks.
• Partners with internal teams to develop plans for risk reduction associated with gaps identified.
• Track, report, and ensure status of security exceptions by line of business.
• Perform risk assessments, document and track findings through resolution.
• Must be willing and able to work flexible hours and go above and beyond to deliver outcomes.
• IT and Security governance, risk, and compliance frameworks and practices (e. g., COBIT, NIST-CSF, ISO).
• IT and Security risk and security controls (e. g., cybersecurity, network, infrastructure, applications, and projects).
• Internal control implementation, including the evaluation of the design and operating effectiveness of controls
• IT and Security audit, risk and compliance.

Requirements:

• Minimum Bachelor's Technical Degree in CS/EXTC/IT.
• Advanced degree preferred, like MSc-IT or CS /ME/MTech-CS/IT or specialisation in IT/Computer Stream.
• Minimum of 3 years of relevant experience and maximum of 6 years of total experience.
• Mandatory 3-6 years of experience managing security Control implementation, audits, such as ISO 27001 including preparing control owners for audits, interpreting control requirements, reviewing control evidence for appropriateness, testing control effectiveness, presenting control evidence to external auditors, and audit planning with external auditors.
• Must possess excellent (English) written and verbal communication skills and be capable of creating clear, well-written documentation, recommendations, and reports/communications.
• Has sufficient experience and knowledge to plan and execute work with limited direction and supervision.
• Knowledge of security frameworks such as ISO or NIST.
• Advanced knowledge of testing techniques and data analysis principles, as well as the ability to interpret results.
• Advanced-level communication, presentation, and relationship management skills.
• Proficiency with GRC systems Certifications.