Sr. Associate - ISO Audit Information Secuity

Elevate Your Impact Through Innovation and Learning

Evalueserve is a global leader in delivering innovative and sustainable solutions to a diverse range of clients, including over 30% of Fortune 500 companies. With a presence in more than 45 countries across five continents, we excel in leveraging state-of-the-art technology, artificial intelligence, and unparalleled subject matter expertise to elevate our clients' business impact and strategic decision-making. Our team of over 4, 500 talented professionals operates in countries such as India, China, Chile, Romania, the US, and Canada. Our global network also extends to emerging markets like Colombia, the Middle East, and the rest of Asia-Pacific. Recognized by Great Place to Work in India, Chile, Romania, the US, and the UK in 2022, we offer a dynamic, growth-oriented, and meritocracy-based culture that prioritizes continuous learning and skill development and work-life balance.

What you will be doing at Evalueserve :

Conducting external and internal audits utilizing ISO 27001:2022, ISO 22301:2019, SOC Assessment, NIST CSF, and other standards / frameworks for general security controls

Implementing and maintaining ISMS and BCMS or other standard / framework requirements globally

Operating the Archer platform and ensuring user access, data feeds, workflows, and configurations are updated

Providing information security-related support to users and solving their queries

Responding to MSA / RFI / SOW or other security queries from customers / stakeholders

Contributing to information security documentation, which includes the creation, review, and update of various IS / BCP / BIA / cybersecurity policies, procedures, guidelines, awareness newsletters, posters, etc.

Conducting gap assessments and providing necessary feedback on identified risks based on the information security management system

Auditing and implementing security controls over real-time networking environments, including network devices (routers, firewalls, switches, etc.), servers (Windows, Linux, MacOS, Solaris, etc.), cloud workloads, and applications

Analyzing data security controls to identify weaknesses and design strategies to address gaps and non-compliance across multiple projects

Preparing periodic dashboards of security audits and sharing them with senior management

Developing information security processes and procedures in line with standards and best practices

Managing information security-related incidents

Investigating, documenting, and reporting any information security-related issues

Acting as an Information Security team representative during calls with clients and stakeholders

What were looking for:

Any technical graduate from a reputed institute with 36 years of experience in the information security domain

A proven track record in information security and audit management, including risk assessment, incident response, and security awareness training

Strong knowledge of the Archer platform, including configuration, workflows, and data feeds (Archer certification is a plus)

Considerable experience in planning and implementing security standards such as ISO 27001:2022, ISO 22301/2019, and SOC1 and 2

Strong understanding of GRC principles, frameworks, and methodologies

A lead auditor / implementer of ISO 27001:2022 and ISO 22301:2019 standards and CISA / CISSP certified will be preferred

Can do attitude and ability to take initiatives

Positive and strong analytical thinking and ability to collaborate effectively and efficiently within a small, hybrid team

Flexibility and ability to work in a self-directed environment, collaborate with others, and seek guidance when needed

Ability to work independently and as part of a team

Experience of working in global organizations and navigating through cross-border cultures

Follow us on https://www.linkedin.com/compan y/evalueserve/

Click here to learn more about what our Leaders talking on achievements AI-powered supply chain optimization solution built on Google Cloud.

How Evalueserve is now Leveraging NVIDIA NIM to enhance our AI and digital transformation solutions and to accelerate AI Capabilities .

Know more about how Evalueserve has climbed 16 places on the 50 Best Firms for Data Scientists in 2024!

Want to learn more about our culture and what its like to work with us?

Write to us at: careers@evalueserve.com

Disclaimer: The following job description serves as an informative reference for the tasks you may be required to perform. However, it does not constitute an integral component of your employment agreement and is subject to periodic modifications to align with evolving circumstances.

Please Note : We appreciate the accuracy and authenticity of the information you provide, as it plays a key role in your candidacy. As part of the Background Verification Process, we verify your employment, education, and personal details. Please ensure all information is factual and submitted on time. For any assistance, your TA SPOC is available to support you .