GEP is a diverse, creative team of people passionate about procurement. We invest ourselves entirely in our client's success, creating strong collaborative relationships that deliver extraordinary value year after year. We deliver practical, effective procurement services and technology that enable procurement leaders to maximize their impact on business operations, strategy and financial performance. Named a Star Performer in Everest Group's Peak Matrix of Procurement Services Providers, Winner in the HfS Blueprint Report on Procurement Outsourcing Providers and to the Supply & Demand Chain Executive 100 for nearly a decade, GEP is also ranked a leader on Gartner's Magic Quadrant analysis of the world's top sourcing and procurement software providers. Clark, NJbased GEP has 10 offices and operations centers in North and South America, Europe and Asia. To learn more, please visit http://www.gep.com.   Oversee data security policies framework as per the recognized industry standard (ISO 27001 & SOC 2 - Service organization control). Closely engage with IT, technology, Human resource and business functions to enforce security policies.  Ability to work with external / client's Auditors to responds to security & risk assessments on Internal controls and cloud security. Review third party Audit reports (all major suppliers and especially Datacenter). Ability to articulate the effectiveness of security controls to existing & prospective clients.  Oversee reported policy violations and data security investigations; report suspected data breaches.   Ensure completeness of Penetration Testing for Application platform hosted in the cloud infrastructure with satisfied results for any new changes to the platform.   Serve as the point person for all external inquiries involving data security compliance issues, questions, resolution. This person should have experience with larger organizations and have ability to interact with customers on security and privacy aspects.   Ability to handle communication internally related to information security best practices, mandates, etc. Develop and coordinate security orientation and awareness programs for employees on how to access confidential data.   Ability to handle issues related to system, processes, people, facilities, behaviors, policies, procedures to ensure alignment with compliance   Work with Auditors on Certifications Programs  Perform Internal Audits as per SSAE16 and ISO27001 Audit standards- (every quarter in each office globally) for all the departments to confirm if they are following all the policy and procedures. Collect and review evidence documents for the same. Prepare Audit Plan, Reports, Review PCARs to closure of any issues   Working with the legal team to review information security clauses in the clients contracts.  Fill out Auditor's templates and questions to map audit criteria like Security, Integrity, Privacy etc. with respective policy and procedure documents and controls   Understand/explain any issues/negative findings in Internal and external Audit and follow-up with the team to get it resolved in expected time.   Good documentation, communication and Presentation skills

Mumbai

GEP - IT Security Lead 

GEP - IT Security Lead  ,Job Description for GEP - IT Security Lead  in GEP in  Mumbai for (10-20) years of experience. Apply Now!

Job Description for GEP - IT Security Lead  in GEP in  Mumbai for (10-20) years of experience. Apply Now!