SUMMARY : The Senior Manager/Manage will ensure that security and compliance concerns within both internal and external initiatives are properly addressed. The Senior Associate will regularly and upon demand meet with internal and external project sponsors and stakeholders, to perform security risk assessments to address security risks. The Senior Associate will document findings, suggest mitigation controls, track security deficiencies, and manage the implementation of suggested mitigations to ensure risks are successfully mitigated. KEY DELIVERABLES : The Key Deliverables for this position include, but are not limited to the following: - Perform Security risk assessments of Projects and Suppliers using security risk assessment methodology. - Suggest administrative, technical and physical security controls to protect sensitive information on project and supplier environments. - Create Control requirements checklist. Perform control testing and prepare report. - Monitor and report compliance to agreed security processes for assigned client projects. - Perform Security risk assessment and Security architecture review of cloud solutions. - Perform gap analysis with respect to contractual and other industry compliance requirements such as ISO27001, HITRUST, PCI DSS, HIPPA etc. - Assist during client audits and visits. - Ensure quality deliverables and client satisfaction. GENERAL DUTIES : The General Duties for this position include, but are not limited to the following: - Serves as a point of contact for client projects, suppliers related to security risk management. - Ensure effective stakeholder engagement both locally and globally. - Cultivates relationships across internal teams and works towards building professional networks. - Builds a positive, transparent, collaborative working environment for the team. - Time management to ensure project or non-project related deliverables are completed in a timely fashion. COMPETENCIES: The Competencies for this position include, but are not limited to the following: - Must have ISO 27001 implementation or auditing experience. - Must be familiar with SIG, SSAE compliance, SOC 1, SOC 2 reports. - Must be familiar with security risk assessment methodology (ISO 27005 a plus) and have experience in performing the same. - Must have rudimentary understanding of compliance requirements such as GDPR, MA 201 CMR 17, PCI DSS requirements, HITRUST, HIPPA and information security best practices. - Strong oral communications and writing skills are a must. - Must be a self-starter with strong organizational skills to enable navigation of the company to identify sponsors, stakeholders and interested parties. - A - can do- attitude team player who works well under pressure and with dispersed groups, worldwide. EXPERIENCE AND EDUCATION: The Experience and Education qualifications for this position include, but are not limited to the following: - Bachelors or Master's degree in IT, science, math, engineering, computers, security or related field. - 3-5 years of experience in Risk Management, ISMS, ISO 27001 implementation. - Technical certifications such as CCSP, CISSP, CISA is a plus. - Working knowledge of any off the shelf GRC product will be an advantage. - Excellent verbal and written communication skills a must. - Solid understanding of IT security technologies, and particularly security technologies.

Gurgaon/Gurugram

Senior Associate - Enterprise Security - Shared Services Center 

Senior Associate - Enterprise Security - Shared Services Center  ,Job Description for Senior Associate - Enterprise Security - Shared Services Center  in The Recruiters in  Gurgaon/Gurugram for (3-8) years of experience. Apply Now!

Job Description for Senior Associate - Enterprise Security - Shared Services Center  in The Recruiters in  Gurgaon/Gurugram for (3-8) years of experience. Apply Now!