Manager

Skills Required:

• ISO 27001:2013 LA, CISA/CISM,
• Knowledge on Auditing in BFSI.

Job Responsibilities: Day to day activities from Audit and Compliance point of view.

• Prepare, review and maintain all documentation viz. policy, procedures, SOPs etc as necessary for all implemented compliances at ISG.
• Conduct process compliance and security audits on a monthly basis focusing on PA-DSS, PCI DSS and ISO 27001:2013
• Conduct Security Awareness training for employee.
• Assist the other functions in conducting Risk Assessment.
• Maintain the annual compliance calendar for all compliance and client audits
• Maintain the records as required by various compliance implemented at corporate level.
• To ensure Change Management process is followed as per Customer or ISG Policy and Procedure documents.
• Ensure documentation of audit findings including details of causes, actions taken, tangible and non-tangible impacts of the incident and overall effectiveness
• Incorporate key learnings from each incident and from feedback into the plan to ensure continuous improvement of the Information Security.
• End to end documentation of security incidents and breaches, the correction and corrective actions and identification of RCA.
• Ensure closure of audit findings including details of causes, actions taken, tangible and non-tangible impacts of the incident and overall effectiveness
• Responsible for MIS/Reporting on established security metrics on a regular basis.
• Knowledge of Regulatory bodies (RBI, NPCI etc) guidelines as applicable.