Roles & Responsibilities: Perform internal audits and ensure compliance with policies and external laws. Maintain the audit calendar & program and provide periodic reports to stakeholders. Improve reporting mechanisms for the audit function. Track remediation of any findings from internal or external assessments. Manage the audit risk assessment program minimize. Contribute to the data risk management program. Support the team in risk management activities organization. Assist with successful implementation and enforcement of security policies and procedures across old & new technologies / systems/ environments. Participate in the implementation of security initiatives. Support team to implement the GRC initiatives with respect to audit programs. Must have working knowledge of GDPR, Implementation, SOC2, ISMS. Mandatory skills: Information Security, Risk, IT GRC, Audit. 7+ years in an Information Security role with progressive experience in the following areas: Audits and assessments - information security, network security, application security, physical security, privacy etc. Information or IT risk management and compliance Knowledge of various standards like ISO 27K, COBIT, PCI-DSS, NIST, IT GRC etc. exposure to regulatory audits will be an added advantage. Understanding of Privacy regimes Application Security concepts from an audit perspective MS Office (Word, Excel, PowerPoint) Excellent organization, communication, and presentation skills with the right attitude Ability to multi-task General professional writing proficiency Experience in the services industry is mandatory. ISO 27001:2022 Certification Mandatory, CISA/CISM preferable but not mandatory. Having exposure on vendor & client management CISO responsibilities: Experience in developing CxO level dashboards , Cybersecurity Knowledge Leadership and Management Risk Management Security Strategy and Planning