Engineer - ESGC

Position Name: Engineer - ESGC

To ensure Enterprise Risk management framework and Information Security Management System are effectively implemented in line with the business objectives

1. Extend support to Implement customer specific information security / enterprise risk related requirements
2. Coordinate and communicate with internal customers to ensure compliance of security / risk guidelines3. Conduct audit to ensure compliance with customer risk / security requirements4. Contribute towards customer audits ensuring successful completion5. Participate in Customer calls when needed and understand customer expectations6. Provide periodic updates on the implementation status

1. Document procedures and policies based on inputs provided
2. Support & implement ISMS (Information Security Management System) framework.3. Implement new security initiatives and improvements4. Collect applicable measures and perform periodic analysis as per the measurement program5. Provide updates periodically6. Prepare Plan and conduct periodic internal audits7. Track all internal/external audit findings to closure8. Implement ERM and conduct risk based audit9. Conduct surprise/ random audits and track findings to closure10. Complete the assigned activities like Risk exception, reconciliation, VAPT, etc within the defined SLA11. Participate in external audits by ensuring readiness of functions providing necessary support for successful completion

1. Understand, align with the goals, roles and responsibilities and provide updates about performance against the set goals
2. Train and mentor team members as appropriate3. Upgrade competency (skills) in line with the current industry practices and business objectives

1. BE/MBA
2. ISO27001 lead auditors certification
3. CISA/ CISSP Certification (Preferred)
4. PCI DSS Implementer certification

1. 2-4 years relevant experience

• Knowledge of ISO27001 Standards & ISO27005 Guidelines
• Knowledge of PCIDSS standard
• Knowledge of risk management (ISO31000)
• Understanding of organizations business and support processes
• Knowledge of IT Security, physical and environmental security and HR security controls
• Knowledge of regulatory requirements