Associate Process Manager

Skills / Experience Required

Must haves

• IS Audit and Controls Implementation, Client contracts review from InfoSec standpoint

• CISA/CISM/CRISC and ISO27001:2022 LI/LA/ISO 27701 (LI/LA)

• ISO20000/SSAE-18 SOC 1 SOC 2 /ITGC/PCIDSS/GDPR

Good to haves

IS/IT Governance

Key Competencies

Technology 1

IS Audit and Implementation

Technology 2

ISO20000/SSAE-18/ITGC/PCIDSS/GDPR

People

APM ++ level - People managers

Roles & Responsibilities

Job Responsibilities

• Experience in planning, execution and reporting of Information Security Audits and Security controls Implementation

• Experience of managing IS Risk Management framework

• Experience in managing SSAE-18 SOC 1 & SOC 2 Assessments, ITGC audits, PCIDSS, ISO 27001, GDPR Assessments and privacy assessments

• Must have any one of the certifications CISA/CISM/CISSP/CRISC/ISO27001:2022 LI/LA/ ISO 27701 LI/LA

• Experience in reviewing client contracts, security documents to identify IT and Security controls requirements

• Exposure in managing and responding to data privacy & security questionnaires, new RFPs from data security standpoint

• Experience in IS Audit and Implementation

• Exposure to ISO20000/SSAE-18/SOX-ITGC/PCIDSS/GDPR

• Must have worked in IS/IT Risk Management

• Must have any one of the Certifications CISA/CISM/CRISC and ISO27001:2013LA

• Must have CEH Certification and relevant experience

• Must have understanding of IT Infrastructure and Technologies

• Knowledge about IS/IT Governance will be an added advantage

• Good communication Skills written and verbal

• Professional discipline, teamwork and healthy competition

• Good customer interaction and result oriented