jobber

This job ad has been posted over 30 days ago...

14

applicants

Role Description:

 Deliver Information Governance, Risk and Compliance Management projects including:
• Compliance readiness (ISO27001, ITIL, COBIT, PCI, etc)
• Conduct Risk assessment and treatment
• Develop security policies, processes, procedures
• Conduct audits & assessments
• Map controls and compliance requirements
• Implementation of GRC platforms
 Deliver medium sized Information Security, Information Risk Management projects independently
 Lead small teams in projects, review deliverables, project management
 Perform Presales activities, such as presales calls, RFP responses, Proposals, presentations, effort estimation
 Support practice development initiatives, including recruitment, service development & definition, IP, white papers, Aujas blog, etc.
 Responsible for assessments, gap analysis (against standards and benchmarks), risk mitigation strategy development and implementation on IT assets

Desired Profile:

 Minimum of 5 years of experience in architecting information security solutions, creating security strategy, security programs and managing information security management systems
 Experience in working with various IS risk management models and ability to perform IS risk modelling, its implementation and management
 Minimum of 2 full lifecycle implementation of ISMS/ BCMS in a complex, multi-location environment
 Experience in understanding client’s business environment and proposing “fit for purpose” information security solutions
 Suggest appropriate technical security solutions for mitigating controls like DLP/ DRM/ Cloud security solutions/ encryption etc.
 Knowledge and implementation/ consulting experience in managing risk and compliance like PCI DSS, Privacy, SOX IT GC etc.
 Knowledge about IT GRC tool like Archer, Modulo etc. Is preferred
 Ability to understand client security requirements and conceptualize / design security controls to ensure the cost of protection is commensurate with the value at risk
 Ability to perform Presales activities, such as presales calls, RFP responses, Proposals,
 Ability to oversee and enforce security controls to ensure client account information security compliance and assurance

Note: Applications have been closed.