Expert - IT Risk & Governance - Global Operations Support Centers Risk Team

Looking fro Expert in Risk and Governance-Global Operations Support Centers Risk team

10+ years of experience in Risk Verticals; Data Privacy, compliance, operational risk, ,IT systems and information security and Business Continuity. Of which at least 7-8 years must include direct experience in Data Privacy & Information security along with sound knowledge of risk management

Knowledge of information security standards (SSAE16, PCI ROC/AOC, ISO 27001:2013), laws (e.g., NIST, FFIEC, etc.), and regulatory requirements (e.g., GDPR, DPL, HIPAA) and commonly used concepts, practices and procedures within the information security, application security, data center security, and privacy.

Preferred expertise and knowledge on majority of following information control areas.

- Physical and Environmental Security

- Information Security Management

- Information classification and handling

- Encryption

- Third Party Security Management

- Incident & Crisis Management

- Audit and Compliance

- Change and Vulnerability Management

- Network Security Configuration and Management

- Systems Monitoring & Logging, Security Configuration and Management

- Access Control

- Business Impact Analysis

- Knowledge of Business Continuity Planning Lifecycle of ISO 22301:2019

- Understanding of Risk methodology (Identification, assessment, and monitoring)

-Vendor assessments