Information Security Auditor - Third Party Risk Management Practice - Big4

Required Seniors at one of the Big Four Consulting Co. for their Third Party Risk Management (TPRM) Practice based in Bangalore

Job purpose:

Senior in the Risk Advisory team to work on various Third Party Risk Management projects for customers of one of the Big Four's across the globe.

JD:

- Compliance - Information security standards such as ISO 27001/2, ISO 22301, ISO 27018, PCI - DSS, HITRUST, etc.

- Comply with regulations such as FISMA, HIPAA, Reg SCI, MAS, etc.

- Access Control, Asset Management, Network and Operations Management, Physical Security, Secure Software Development, Business Continuity Management, Cryptography etc.

- Cloud computing security controls - (important) // hipaa framework

- Evaluating the network security diagrams, SOC 1 and SOC 2 reports, HITRUST work papers etc.

- Strong control, process, and project management skills with the proven ability to influence and drive results from a diverse team of functional stakeholders

- IT Risk Management/ Audit industry certification (such as CISSP, CISA, CRISC, etc.)

- Strong written and verbal communication skills.