We are looking a candidate with hands-on experience in risk management and governance covering the aspects of information security, business continuity management, operational security and data privacy. The candidate shall be capable of creating documents, designing SOPs, conducting audits, reporting findings and tracking them to closure by working with related parties. The candidate shall also be technically sound to manage the security tools. The candidate should have knowledge of Business Continuity Management and should be well versed with various models and concepts of risk management, governance covering operational, business and information security frameworks, processes and functions.   Experience in a similar role with an SMB/startup would be preferred.  Primary functions of the role  - Knowledge of industry standards like ISO 27001/27002 and have worked on ISMS, with a practical and pragmatic approach to needs, standards, and functions   - Identify scope of risk assessments and assist business in conducting business impact analysis  - Establish and maintain relationships with third parties and relevant business and InfoSec/Privacy stakeholders   - Coordinate with internal risk assessors and third parties/business for flawless execution of risk assessments   - Maintain Risk, Issue and Change registers for information security  - Conduct periodic assessments, report findings with related teams and work to get them closed in accordance with the policy framework adopted   - Review risk reports, risk SLAs/performance metrics for assigned business units   - Mapping business processes with risk areas   - Develop and implement a mechanism for defining and maintaining information flow maps within org, and between the org and client organizations - providing controls where necessary   - Participate in risk report discussion with third party and internal business   - Engage respective business units to resource and monitor risk treatment to ensure compliance with Sony's information security policies and standards   - Experience in articulating risk management concepts to all levels of the organization   - Develop presentations; effectively lead meetings and conference calls for third party risk assessments involving IT, business, third party contacts  - Shall have technical background to manage security solutions   - Evaluating security products and recommending the solutions   - Perform various day to day activities related to information security   - Exposure of Content Filtering and Data Loss Prevention   - Maintain currency with security and security-enhancing technologies and brief colleagues as needed to enable measures to be implemented where and when necessary/desirable  - Conduct periodic audit on projects. Provide advice and take action, where necessary, in response to Audit findings and recommendations in respect of information security   - Undertake any other duties commensurate with the grading of the post  Non-technical skills  - Excellent analytical and problem-solving skills   - Work well with others in a culturally diverse environment   - Understanding business requirements for large and complex business environments   - Ability to learn and assimilate information from multiple people and resources   - Should be inquisitive and a fast learner  - Able to manage multiple projects simultaneously, with strong ability to prioritize multiple tasks and respond to emergencies, organize and schedule work effectively   - Exceptional communication, collaboration, and advocacy skills, both verbal and written, with the ability to express complex and technical issues as understandable language to all levels of personnel within the organization, and with clients and other stakeholders

Bangalore

EdGE Networks - Risk Management Specialist 

Job Description for EdGE Networks - Risk Management Specialist  in Edge Networks in  Bangalore for (7-14) years of experience. Apply Now!