Job Description in brief including Roles Responsibilities:
Project delivery for skills - ISO 27001, SOC 12, GDPR, Risk Assessment, SOX, HIPPA, HITRUST, etc. Hands on experience and/or working knowledge.
Knowledge on laws, framework, and regulations pertaining to information security standards - ISO27001, NIST CSF, SOC, Privacy.
Conduct third party risk assessments vendor risk assessments in alignment with company security policies and industry standards.
As part of the SRC team deliver on engagements related to information security, cyber security, risk management and privacy for our customers across the globe.
Responsible for managing and delivering on accounts in accordance with SISA quality guidelines methodologies.
Execute the engagement requirements, prepare and validates reports and schedules that will be delivered to clients and other parties.
Work effectively as team lead and managing the team members, sharing responsibility, providing support, maintaining communication and updating management on progress.
Develop and maintain productive working relationships with client personnel.
Prepare status updates and prepare management presentations etc.
Actively contribute to improving operational efficiency on projects internal initiatives.
Assist in creating innovative insights for clients, adapt methods practices to fit operational team needs, contribute to thought leadership documents and develop new methodologies.
Understand and follow workplace policies and procedures.
Flexible to travel to client location for the project delivery.
Conducting research, surveys and interviews to gain understanding of the business.
Assessing the pros and cons of possible strategies.
Compiling and presenting information orally, visually and in writing.
Mandatory Skills required for the role:
Have min 2 years of experience doing assessment for - ISO 27001, SOC 1 / SOC 2, Risk Assessments, GDPR assessments, SOX.
Have 2+ years of experience in internal auditing (ISO 27001).
Have ~1yr of experience in HIPPA HITRUST CSF
Education Requirements:
Any Graduation - BCA, B.E. or Post Graduation - MCA, M. Tech in Computer science (CS) / Information Science/ Forensic analysis / Cybersecurity
Certification: ISO 27001 LA or LI, CISA, CISM optional
Personal Attributes:
Excellent verbal and email Communication Skills.
Strong interpersonal and presentation skills.
Ability to handle difficult situations effectively.
Ability to analyse and solve complex issues.
Able to prioritize and execute tasks in a high-pressure environment.
Keen attention to detail.
Experience working in a team-oriented, collaborative environment.
Flexible and multi-tasking ability, coordinating work effort over numerous projects.