ITGC Associate

Job Position Title: Senior Associate/ Manager

Location: Pune

Years of experience required: 4-10years

Responsibilities:

1. Ensure all information security and cyber security policies, procedures and guidelines are reviewed and updated in timely manner and exceptions to those are handled appropriately.

2. Assess efficacy of security controls, document and report control failures and gaps to stakeholders, provide remediation guidance and prepare management reports to track remediation activities.

3. Implement security controls, risk assessment framework and program that aligns to best practices and regulatory requirements.

4. Develop relevant metrics, analyze data, identify trends and help drive improvements to the control environment.

5. Ensure key information security risks and issues are identified, addresses and resolved in a timely manner.

6. Ensure risk acceptances are documented, tracker and followed up till closures and renewed whenever required.

7. Drive security awareness program across the organization. Ensure the awareness activities are handled appropriately, including but not limited to creation of content, help in designing the content and broadcasting of content to relevant parties in a timely manner post approvals.

8. Assist in ISO certification maintenance activities and migration to new standard activities as per organization requirements.

9. Well versed with well-known security frameworks such as ISO 27001, ISO 22301, NIST, COBIT etc.

Desired Skills:

- Risk management, cyber security, ISO 27001 lead auditor, security framework, regulatory requirements, security controls, project management, business continuity management, risk assessment, project management, compliance assessment, excellent documentation skills, strong communication and presentation skills, strong interpersonal skills Qualification -

- Relevant industry certification such as ISO 27001 Lead Auditor is highly desirable.

Mandatory skill sets:

ISO 27001, updating policy, reviewing Policy, ISO understanding , Risk Assessment , risk Management, Implement security controls