Information Security - GRC & Data Privacy

Role & responsibilities

Perform Cyber Assurance assessments within CLA Global Indus Value Consulting.

Keep track of control remediation across companies & guide on process & technology controls

Operationalize & Run GRC program across all group companies

Explore automation opportunities in audit & GRC areas

Evaluate & run proof of concept for GRC technologies

Maintain oversight on current & emerging threat landscape. Accordingly update cyber assurance framework

As ISMS manager, run ISO 27001 program

Drive Privacy framework rollout

Roll out and manage TPRM

Preferred candidate profile

Sound knowledge of InfoSec standards such as ISO27001:2022 and ISO 27701:2019

Performed internal audits for standards and frameworks such as ISO27001, NIST etc

Basic understanding of following security technologies (EDR, DLP, PIM, IRM, SIEM, SOC etc)

Sound Knowledge of Risk Frameworks

Sound Knowledge of DPDP Act and PIMS

Certifications - ISO 27001:2022 LA certified, ISO 27701:2019 LI certified (Preferred)