Shall be accountable for interpreting the RFI/RFP, or Customer queries, and responding to them.
Review Contracts/MSA/DPA to ensure they include appropriate risk-related clauses, such as security controls, data privacy, liability, and business continuity terms.
Shall be accountable for assessing vendors or suppliers to identify potential risks in areas such as cybersecurity, data protection, regulatory compliance, and operational resilience.
Participate in meetings with customers, partners, and vendors and be accountable for handling security/privacy-related discussions.
Work closely with IT, HRD, L&D, and other teams to close any Customer audit observations, and shall be accountable.
Shall be accountable for tracking the external advisories/threat intelligence to closure.
Shall be accountable for Enterprise Risk Management.
Requirements
Must have 5 years in a Customer/Vendor role responsible for Responding, clarifying and reviewing Contracts around below standards/models/industry best practices and their mapping to Organizational Practices.
In-depth knowledge of standards and frameworks such as ISO 9000, ISO 27001, PCI-DSS, SOC 2, CMMi, NIST, HIPAA, GDPR, and CCPA.
Must have led the implementation of security standards like ISO 27001, PCI-DSS, SOC 2, etc.
Knowledge of privacy regulations like GDPR, PDPD, DPDPA, etc. is preferred.
Must have faced or facilitated customer or external audits.
Proven experience in quality assurance, compliance, and risk management. At least more than 7 years of experience in managing the audit.
Excellent communication and interpersonal skills.
Strong analytical skills and attention to detail.
Ability to work collaboratively with cross-functional teams.
Must have managed a team of more than 3 members at least for 5 years.
Certification in Quality Assurance or Information Security (e.g., ISO 9001 Lead Auditor, ISO 27001 Lead Implementer, CEH) will be preferred.