GRC (Governance, Risk & Compliance) | 4 to 6 Years | Mumbai, Bengaluru & Chennai

Job Description

• Play a role in the delivery of GRC consultancy services customer facing
• Working closely with Customer s team to develop GRC deliverables, Security Strategy, Frameworks, Policies, Assessments, Solutions etc and lead their implementation either at customer location or remotely dependent upon the customers requirements and preferred working practices
• Developing and implementing Enterprise Security Strategy Governance Frameworks, Standards, Policies
• Conversant in ISO27001, NIST, COBIT, PCI DSS etc
• Ability to adhere to strict quality and change management process
• Researching, developing, innovating, and delivering effective and consistent solutions to support the infrastructure systems ensuring the application of current and emerging technologies
• Support customer to deliver IT Security Governance to attend Security Working Groups with customer
• Provide potential security related Service improvements
• Review potential remediation options to address vulnerabilities discovered by scanning and provide input into recommendations
• Support investigations into abnormal User activity as a result of a security investigation
• Review changes to the ISMS proposed by customer and provide appropriate documented updates to the processes, roles, and responsibilities
• Provide security risks related to the Cyber Services

Primary Skills

• Must have experience in Security Risk, Compliance and Data privacy
• Audits Reviews, Gap assessment and implementation
• Understanding of Risk management
• Developing and conducting security awareness program
• Security incident management
• ISO 27001, PCIDSS, SOX, HIPPA, GDPR etc standard and regulatory requirement

Secondary Skills

• CIS Benchmark hardening
• Knowledge in Unix, Windows, Active Directory, networking principles including TCP IP
• Knowledge of Security tools for Vulnerability Management
• Privilege Identity management
• Security information and event management SIEM
• GRC tool knowledge
• Able to manage transition and transformation of GRC projects