Information Security- Risk Manager- GRC

Position/Role: - Information Security- Risk Manager- GRC (BCP & ISO-27001-2022 Implementation)

Exp - 5 to 10yrs

Job Location - Delhi

Risk Manager- GRC (ISO-27001-2022 & BCP) is responsible for overseeing the implementation, maintenance, and continual improvement of the Information Security Management System (ISMS) in alignment with ISO 27001:2022 standards. This role ensures that the organization's information security practices meet regulatory requirements, client expectations, and industry best practices, while also mitigating risks to the confidentiality, integrity, and availability of information.

Education:- Bachelor's degree in Information Security, Computer Science, or a related field. A Master's degree is a plus.

Candidates with Broking/Trading Industry Experiences are preferred.

Experience: -

• 5+ years of experience in information security management, with a focus on ISO 27001 implementation and compliance.
• Proven experience in leading ISMS implementation and managing Information Security compliance audits.

Certifications: -

• ISO 27001 Lead Implementer or Lead Auditor certification.
• Additional certifications such as CISSP, CISM, or CISA are advantageous.

Skills:-

• In-depth knowledge of ISO 27001:2022 standards and information security best practices.
• Strong understanding of risk management and incident management processes.
• Excellent communication, documentation, and project management skills.
• Ability to work collaboratively with cross-functional teams and influence decision making.
• Knowledgeable and experienced in crisis management best practices.
• Experience with Cloud AWS built environments, SaaS provider architecture, and cloud-based disaster recovery methodology.

Key Responsibilities: -

1. ISMS Implementation & Maintenance.

2. Risk Management.

3. Compliance & Audit Management.

4. Training & Awareness.

5. Incident Management.

6. Continuous Improvement.

7. Stakeholder Communication.

8. Vendor and Third-Party Management.

Interested candidates can share their CV at [Confidential Information] or can directly apply on the job posting.