- Act as an Information Risk and Compliance Advisor - Understand Technology Landscape (Application and Infrastructure) and proactively review Shell's information security and related risks wrt threats and vulnerabilities, legal and regulatory compliance - Facilitate smooth conduct of Risk Assessment (including Legal &amp; Regulatory) on Applications, Network&amp; Systems - Perform end to end Security Assessment on vendor offerings - New/Leveraging existing (SAAS / PAAS/IAAS) services including integration with Shell environment. - Translate Technical, legal and Regulatory Compliance obligations into a cohesive collection of Security Controls and provides the respective stakeholders with the IRM requirements and its implementation methodologies.&nbsp; - Collaborate with Controls Testing Team and ensure all the controls outlined for an application/Infrastructure are designed effectively. - Coordinate in conducting VAPT (Vulnerability Assessment and Penetration Test), Review VA-PT results and recommend the risks to be remediated. - Work with Project Managers, Business Analysts, Architecture and Support Team to ensure Shell IRM standards are being - Ensure all the risks are documented, classified and addressed with appropriate action as per the IRM standards. - Active participation in driving education and awareness of Information security related issues and risks to Business/Business IT Teams, - Support in development of tooling to support IRM processes and ensuring this is fit for purpose. - Actively participate in reviewing and improving the Information Security Controls implemented in the organization. - Active participation in the Assurance and Architecture level discussions in the engagements. - Actively participate in IRM team and community meetings, representing IRM and Business interests in applying setting standards and policies for the Group and the businesses, leading to a fit for purpose, evergreen IRM framework. - Support during Internal /External Audit - Ensure that IRM continues to focus on risks significant to the Business, with emphasis on innovation. - An Individual Contributor, part of the Global IRM team - Face of the IRM; Interfaces with Project Delivery staff/Business / Business IT teams - A special challenge will be to stay on top of the many engagements while at the same time having a deep understanding of Information security. - Communication and Stakeholder Management skills are essential for this role, being able to cut through complex IT issues and explaining those in easy Business language. - Good understanding of, and experience with Information Risk Management, IT Security and Compliance and Security Controls and Audit - Advanced understanding of internal and external IT security standards, SOX, PCI, SOC2/1, ISO27001 standards and relevant legal compliance aspects. - Robust understanding of, and solid experiences with the impact of Security on application development and operations as well as the IT Infrastructure. - Ability to promote high performance teams, working with inclusiveness and cultural diversity, across organizational boundaries. - Good understanding of cloud security requirements and third-party control assurance. - Ability to interface with different groups (Third parties, Business and IT) internal and external to IT (security) and to network globally across Group businesses, as well as with external groups. - Technical knowledge &amp; relevant experience in security domains /technologies related to: a. Infrastructure/Network security b. Identity and Access Management c. Business Impact Assessment d. Application security e. Data Leakage Prevention f. End-Point Protection f. Web filtering technologies, Proxies and firewalls. g. Vulnerability Assessment / Penetration Testing h. Cloud security - Knowledge of Data Security Standards: PCI DSS, Privacy Principles - Driving Platform / Application security and compliance - Ability to foresee and identify mitigation strategies for Risks Candidate must also: a. Display excellent communicating and influencing skills b. Display analytical and problem solving skills c. Be pro-active and self-motivated d. Display strong interpersonal and negotiating skills with all levels of staff. e. Display Ability and eagerness to quickly learn new technologies. Qualifications : - A qualification in CISSP, CISA, CRISC or CISM Interested folks can apply here on iim jobs &amp; get in touch on 9619415230

Bangalore

Advisor - IT Risk & Control - Consulting Firm 

Advisor - IT Risk & Control - Consulting Firm  ,Job Description for Advisor - IT Risk & Control - Consulting Firm  in GSS HR Solutions in  Bangalore for (9-14) years of experience. Apply Now!

Job Description for Advisor - IT Risk & Control - Consulting Firm  in GSS HR Solutions in  Bangalore for (9-14) years of experience. Apply Now!