Sr. Executive- Audit and Compliance (US Shift)

Summary:

The Sr. Executive Audit and Compliance is responsible for leading and managing the implementation of ISO 27001 and NIST Cybersecurity Framework (CSF), HIPAA assessments and SOC2 Type2 across the organization. This includes developing and implementing an Information Security Management System (ISMS), NIST, conducting risk assessments, conducting internal audits, compliance monitoring, policy development, incident response and supporting and managing the certification process, BCP and DR activities

Essential Duties and Responsibilities:

• Lead the implementation of NIST CSF, risk and compliance, HIPAA assessment and SOC2 Type2 compliance
• Conduct risk assessments to identify and prioritize information security risks and prepare gap analysis report
• Develop and implement security controls to mitigate identified risks
• Plan and execute internal audits
• Conduct vendor assessment audits
• Manage and support in internal / external audit for the certification process for NIST Cybersecurity and HIPAA assessments and SOC2 Type2 compliance
• Perform risk assessments, compliance monitoring, policy development, and incident response
• Monitor and maintain the cybersecurity compliance to ensure that it is effective and compliant
• Investigate and respond to information security incidents and plan mitigation actions

Support and monitor VAPT activities along with product owners, IT and vendors