Noida, Uttar Pradesh
Job Summary
Job Summary : Governance, Risk and Compliance (GRC) – Risk & Compliance Lead
Key Responsibilities
Job Responsibilities : • Performing independent Assessment & recommend mitigation strategies on client’s Governance Risk & compliance environments likeITGC, GDPR, German Data protection Act etc. • Participates in process and control documentation pertaining to controls implementation. • Participates in regulatory audits (process and IT) and management reporting. • Facilitates IT governance implementation. • Research and Development in best practices around core business processes, IT security. • Develop service offerings for various industry regulatory and compliance requirements. • Development and implementation of operational and enterprise risk frameworks. • Liaise on with Client counterparts for compliance reporting & continually enhancing the risk & compliance framework implemented for the project. • Drive & participate in different Risk, Compliance & Audit program and support all external/internal compliance assessment • Drive/assist closure of audit non-conformities • Monitor compliance with various contractual IT security requirements, customer policies/procedures • Ensure relevant data privacy controls were deployed and GDPR requirements are monitored • Point of contact for reporting & investigation of any relevant data breach • Perform assessment to ensure that data privacy requirements were met • Perform Delivery Center Assessment and submit report with mitigation/management response Years of Experience: • 10 + Years
Skill Requirements
Skill Requirement : • Functional experience in domain of Governance, Enterprise Risk Management and Regulatory Compliance. • Experience in regulatory compliance like, BaFIN, MARisk, KRITIS, ITGC, General Data Protection Regulation (GDPR), German Data protection Act etc. • A solid understanding of IT control frameworks and IT general controls • Working knowledge of overall risk management process that is conducting/participating on internal/external risk assessments and remediation process. • Must have experience of conducting risk, compliance & audit programs • Experience in managing large scale information security projects • Experience across multiple Information Security domain i.e. IT Regulatory/policy Compliance, IS Governance, Risk Management, IT Infrastructure Security • Have good technical awareness on Information security & IT network/infrastructure components • Open to learning and working on new domains and technology • Open to travel onsite for long term as well as short term. • Good written and spoken communications skills Good knowledge on Aruba ClearPass NAC integration with wired and wireless authentication along with Secure network access (Profiling and Posturing) • Good hands-on experience in administration of Zscaler proxy solution i.e. Zscaler Client connector, Traffic forwarding, authentication & Security policy configuration
Other Requirements
Other Requirement : • B.E/B.Tech CISA/ CISM/CISSP certification, ISO 27001 (Lead Auditor) preferred
#body.unify div.unify-button-container .unify-apply-now: focus, #body.unify div.unify-button-container .unify-apply-#body.unify div.unify-button-container .unify-apply-now: focus, #body.unify div.unify-button-container .unify-apply-
