Position: Consultant Risk and Compliance Experience: 3 to 5yrs Location: Noida OR Remote Responsibilities: • Independently manage multiple service engagements ensuring customer service deliveraccording to the company quality guidelines & methodologies. • Lead and manage data privacy and risk & compliance projects from initiation to completion, ensuring they are delivered on time, within scope, and within budget. • Expertise in delivery of risk and compliance advisory services • Experience on conducting privacy risk assessments and data protection impact assessments (DPIAs), and advice on corrective measures to mitigate data privacy risks. • Identify, develop, recommend and/or implement business processes to improve organizational privacy and information security compliance. • Provide analysis of legislative requirements, emerging knowledge, and trends to make recommendations to management. • Work with internal and external customers on consulting engagements and provide business as well as technical leadership to ensure that data, processes and technology are designed for data protection and compliance such as SOC 1/2, NIST, PCI-DSS, CIS 8, ISMS etc. • Knowledge of information protection methodologies and concepts, such as identification and authentication, access control, inception, and audit trails • Work collaboratively with the practice leaders and provide end to end engagement leadership on the projects. • Provide subject matter expertise to the engagement/project teams. Serve as the point of contact for requirements across various standards. • Build and maintain customer relationships by understanding and being responsive to customer needs and ensuring high quality of work. • Contribute in people and knowledge development initiatives within the team and organization. • Maintain an up-to-date understanding of emerging trends in information security and apply new techniques and trends, in-line with overall information security objectives and risk tolerance • Demonstrate strong analytical thinking and interpersonal skills, including the ability to research and understand sophisticated processes and effectively communicate them to interested parties. • Recommend security policy changes and enhancements • Support the Information Security program including development, collection, assessment, and reporting of metrics Requirements: • Demonstrate proficiency in standards such as ISO 27001/2, ISO 22301, ISO 27018, NIST standards on Cyber Security, HITRUST, ISO 27701, etc. • Exhibit a good understanding of GDPR, CCPA, or other privacy laws. • Excellent technical capabilities around information security, business continuity and technology risk assessments • Must be able to demonstrate outstanding communication skills to ensure the ability to articulate clearly IECnmotnpelfroindyaelnetia-CPleornsfoidneanl tial https://www.sdgc.com/ and negotiate with the relevant stakeholders. • Experience working with internal and external auditors/stakeholders/customers • Prior knowledge and experience on performing testing of internal controls specified in Information Security policies • Possess a sound knowledge of fundamentals of information security systems and data privacy requirements. • Display competence in governance and reporting, as well as a strong grasp of cyber and privacy risks. • Effectively managing workflow, including multiple projects, in a proactive and highly responsive manner. • Strong attention to detail with an analytical mind and outstanding problem-solving skills. • Must be able to demonstrate outstanding communication skills to ensure the ability to articulate clearly and negotiate with the relevant stakeholders. • Experience working with internal and external auditors/stakeholders/customers. • Knowledge and auditing experience around some regulations/acts/standards, such as ISO 27001, NIST Cybersecurity Framework and Privacy Framework, SOC2, ISO 22301, NIST CSF and Cloud Security will be preferred. • Ability to work on a flexible schedule when needed, as part of cross-geography and cross-culture global team • Willingness to travel globally on need basis Certifications: • ISO 27001 Lead Auditor, CRISC, CISA, CISM (Must have) • FIP-IAPP (Essential) • Knowledge of compliance standards like ISO 27001, NIST CSF, NIST 800-53, NIST 800-171, GDPR, SOX, SOC, HIPAA, FAIR, OWASP, CIS 20 (Good to have)
