roles & responsibilities:
• perform internal audits and ensure compliance with policies and external laws.
• maintain the audit calendar & program and provide periodic reports to stakeholders.
• improve reporting mechanisms for the audit function.
• track remediation of any findings from internal or external assessments.
• manage the audit risk assessment program minimize.
• contribute to the data risk management program.
• support the team in risk management activities organization.
• assist with successful implementation and enforcement of security policies and procedures across old & new technologies / systems/ environments.
• participate in the implementation of security initiatives.
• support team to implement the grc initiatives with respect to audit programs.
• must have working knowledge of gdpr, implementation, soc2, isms.
mandatory skills:
• information security, risk, it grc, audit.
• 7+ years in an information security role with progressive experience in the following areas:
• audits and assessments - information security, network security, application security, physical security, privacy etc.
• information or it risk management and compliance
• knowledge of various standards like iso 27k, cobit, pci-dss, nist, it grc etc. exposure to regulatory audits will be an added advantage.
• understanding of privacy regimes
• application security concepts from an audit perspective
• ms office (word, excel, powerpoint)
• excellent organization, communication, and presentation skills with the right attitude
• ability to multi-task
• general professional writing proficiency
• experience in the services industry is mandatory.
• iso :2022 certification mandatory, cisa/cism preferable but not mandatory.
• having exposure on vendor & client management
• ciso responsibilities: experience in developing cxo level dashboards , cybersecurity knowledge | leadership and management | risk management | security strategy and planning