6.0 - 10.0 years

18 - 25 Lacs

Pune

Remote

.The successful candidate will be primarily responsible for reporting, monitoring, and managing security policies, program, standards and processes. You will understand how information security works together with various business units while looking to manage cybersecurity issues as an enterprise risk. You will liaise with various business partners around the organization to ensure compliance with various frameworks including NIST, ISO 27001, 20243 and SOC 1 and 2. Essential Duties and Responsibilities Manage policies, procedures, standards and various regulatory and compliance programs. Assist with due diligence process that includes answering customer security questionnaires. Assist with maintaining a third-party vendor risk management program. Coordinate internal and external audit exercise. Maintain risk, exemption, security incident response registers. Assist with corporate risk management process. Assist with Business Impact Analysis and BCP/DR plan updates and testing. Protect Rocket customer and intellectual property data. Identify and report on vulnerabilities, SLAs, and tracking associated with a successful and robust information security program. Qualifications 4-6 years of experience planning, researching and developing security policies, standards and procedures. 2-4 years of experience with due diligence process, answering security questionnaires and third-party vendor risk management. Experience with due diligence process, answering security questionnaires and third-party vendor risk management. Experience planning, researching and developing security policies, standards and procedures. Ability to establish KPIs and KRIs to gauge risk, success, and maturity of information security program. Strong experience with Microsoft Excel. Knowledge of disaster recovery and business continuity. Knowledge of risk assessment tools, technologies and methods. Experience providing user guidance, documentation, and consultation. Excellent troubleshooting skills, self-motivated, results-driven and well organized. Experience with change and incident management processes.

Posted 1 month ago

Apply

Security Analyst - GRC Professional Rocket Software