Security Risk & Control Consultant (SRCC) With GRC

Maxima Consulting Inc

security risk & control consultant (srcc)

the security & compliance (s&c) competency centre (cc) lead is responsible for supporting the following:

education

graduate degree plus recognized information security certifications like cissp, ccsp, sscp, crisc, gsec, etc. are good to have

project review and technical advice

- review all new high-risk projects; new technical designs; for information risks and advise on suitable controls and mitigations at early stages of the program.

- lead the s&c analyst for specific technology and advice on the information security for their projects.

- offer advice to shell and suppliers to assist in resolving questions and issues around how to manage risk

- provide subject matter expertise for projects and business stakeholders, in combination with the improvement program.

- work with the architecture community to review new technology and architecture innovations.

risk management and mitigation

- assess and classify all potential business and infrastructure information risks.

- execute, with suppliers, risk analyses on it application/services.

- develop and socialize our overall risk profile and action plans to mitigate risks

- review and recommend approval project charters.

- facilitate smooth conduct of risk assessment (including legal & regulatory) on applications, network& systems

- perform end to end security assessment on vendor offerings – new/leveraging existing (saas / paas/iaas) services including integration with shell environment.

- translate technical, legal and regulatory compliance obligations into a cohesive collection of security controls and provides the respective stakeholders with the irm requirements and its implementation methodologies.

- support in development of tooling to support irm processes and ensuring this is fit for purpose.

- actively participate in s&c team and community meetings, representing s&c and business interests in other cc forums.

- support during internal /external audit

• Experience

  7 - 13 Years

• No. of Openings

  25

• Education

  Diploma, Any Bachelor Degree

• Role

  Security Risk & Control Consultant

• Industry Type

  IT-Hardware & Networking / IT-Software / Software Services

• Gender

  [ Male / Female ]

• Job Country

  India

• Type of Job

  Full Time

• Work Location Type

  Work from Office