Justdial - Compliance & Audit Engineer - Information Security & Risk Management (6-11 yrs)

Job Description :

Key Responsibilities :

Regulatory Compliance :

- Understand and apply regulations, guidelines, and industry best practices to manage risk and ensure compliance.

- Develop, maintain, and audit security documentation, including policies, standards, and procedures.

- Guarantee compliance with standards such as NIST 800-53, NIST 800-171, ISO 27001, SOX, PCI, HIPAA, and other regulatory requirements.

Risk Management :

- Manage and support the Information Security Risk Management Life-cycle.

- Identify deviations from standards, assess risk levels, and recommend mitigation measures.

- Provide corrective treatment of risks and compliance concerns from both internal and external perspectives.

- Conduct internal security assessments to ensure compliance.

Security Expertise :

- Manage advanced security tools like Endpoint Security, Network Security, SIEM, SOC, SOAR platforms, and Vulnerability Management.

- Develop expertise in Application Security and Risk Management.

- Monitor the effectiveness of internal controls and procedures.

IT Compliance Communication :

- Promote awareness of standards of conduct.

- Educate stakeholders about IT compliance policies, issues, and preventive measures.

- Develop action plans to resolve compliance vulnerabilities.

Minimum Eligibility :

Educational Qualifications :

- Graduate/Postgraduate with a minimum of 6 years of relevant experience in Cybersecurity & Risk Compliance.

Technical Skills :

- Implementation knowledge of ISO 27001 standards.

- Proficiency in Security Risk Assessments, Vulnerability Management, and Compliance Management.

- Expertise in ITDR Management, Cloud Security (AWS/Azure), and OT/IoT Security.

Certifications :

- Possessing certifications such as CISSP, CISA, CRISC, or CISM is preferred.

Soft Skills :

- Excellent communication, presentation, and stakeholder management skills.