Senior Associate - Governance/Risk & Compliance - IT

Job Description :

- B.Tech/ MCA/ MBA with ISO 27001 Lead Auditor with a minimum of 3-7 years of relevant experience in IT risk / cyber security / data privacy consulting

- Candidate should have Strong technical knowledge in one or more of the following : network and application security testing, IT security governance and risk, digital forensics and incident response, security architecture, deployment of security appliances such as DLP, SIEM, IDS/IPS, etc.

- In-depth knowledge of the security and privacy provisions of a variety of regulations and standards such as PCI, NERC/CIP, SOX, HIPAA/HITECH, FFIEC, EU Privacy Laws, ISO, and NIST 800 series

- Proficiency with a variety of Windows, Unix and Linux operating systems

- Experience with testing and development frameworks such as the Open Web Application Security Project (OWASP), Open Source Security Testing Methodology Manual (OSSTMM), the Penetration Testing Execution Standard (PTES), Information Systems Security Assessment Framework (ISSAF), and NIST SP800-115

- Qualified to pursue a job-relevant certification (CISA, CISM, CRISC, CISSP, CIPP, GIAC)

- Strong multi-tasking and project management skills

- Excellent verbal and written communication (English) as the position requires frequent communications with International clients

Position Responsibilities :

- The senior associate will be an integral team member by assisting in our Security, Privacy and Risk Consulting (SPRC) practice.

- The associate will work with teams of security and privacy staff in a wide variety of systems environments, which includes compliance, and governance of the Information Security and Data Privacy related needs of our clients.

- This team assists clients with selecting, improving, controlling, securing, managing and monitoring the appropriate systems to address their information needs.

- We serve a diverse base of clients in a variety of industries and understanding how technology impacts the operation and growth of organizations is what we do best.