Deputy Manager

• Role Description

• ISMS or Third-Party Risk Assessments
• Lead engagement team in delivering client engagements
• Support Managers/AD/D in assessment/ audit execution, reporting, quality review and tracking Support Managers/AD/D in responding to RFP, proposals, new opportunities
• Lead discussions with client teams from various depts. Such as compliance teams, auditing and regulators to identify and document various requirements/obligations
• Flexible to step-in and perform work on ground such as conducting risk assessments and audits with respect to people, process and technology
• Act as subject matter expert (SME) for providing guidance and share knowledge with team members. Assist team members during engagements
• Should be able to work as independently on short term engagements
• Perform quality reviews of work performed by team members

Desired qualifications

• 6+ Relevant years of experience in Third party risk management
• Relevant years of experience in IT Audits, Cloud security
• Experience with ISO22301 implementation and audits
• Preferred certifications CBCI / CBCP / ISO22301 LI or LA Offensive Security Certified Professional, CISA to work in a cross-functional, cross-cultural matrix environment
• Understanding of Third party/vendor/supplier risk management considerations
• Knowledge of Data Protection & Privacy related risks associated with Third-Party and relevant control frameworks for Third party risk management
• Excellent written/verbal communication
• Excellent documentation and presentation skills
• Highly motivated and willing to work in local and global environments
• Security certifications like CISSP, CISA, CISM, CEH, ISO27001
• Work experience in Infrastructure / Application Security
• Work experience in IT Audit
• Work experience in Information Risk Management

Location and way of working

• Base location: Bengaluru , KA
• This profile involves frequent / occasional travelling to client locations OR this profile does not involve extensive travel for work.
• Hybrid is our default way of working. Each domain has customized the hybrid approach to their unique needs.