Risk Compliance and Governance Analyst

Job Description:

• Expertise in cyber security frameworks such as ISO27001, NIST 800-53, NIST CSF, PCI-DSS, ISO22301, data privacy etc.
• Skilled in risk management, risk assessment and analysis, internal audit
• Technical knowledge in the security domains such as information security management and governance, systems and network security, Physical and logical IT controls, application security, data security, cloud security, access controls, authentication, or security protocols etc.
• Experience in conducting vendor onsite assessments. Experience of assessing cloud service providers(CSP) will be an added advantage.
• Understanding third-party risk management concepts, exposure to third party (or) outsourcing regulatory requirements.

Role Purpose

The purpose of the role is to analyse security requirements and design security solutions towards

protecting organization’s security assets.

Do

1. Analyse Risk and Compliance assurance to protect sensitive information
   1. Identify Risk and compliance issues at all levels as per the updates
   2. Analyse common compliance frameworks and ensure policies, processes and standards are in place
   3. Perform quarterly audit, sample testing and report risks
   4. Communicate assurance findings to the clients in a timely manner
   5. Monitor remediation on assurance findings and ensure closure of all open points
   6. Ensure all required controls are implemented, documented and monitored so as to ensure full audit compliance.
   7. Coordinate with IT team members to ensure IT audit findings are addressed in a timely manner.
   8. Provide timely and accurate reporting and documentation to management on all key parameters as needed.
   9. Perform annual SOC preparedness audit to ensure that system set up are secure and maintain privacy of customer data
   10. Suggest corrective measures to cyber security issues and provide timely support and future recommendations

Stakeholder Interaction

Display

Lists the competencies required to perform this role effectively:

• Functional Competencies/ Skill
  • Domain/Industry Knowledge - Awareness and knowledge of Corporate IT Security ~ Contractual IT Governance & Compliance ~ Data Protection ~ Privacy ~ IT General Controls ~ Internal & External IT - Expert
  • Leveraging Technology - In-depth knowledge of and mastery over ecosystem technology that commands expert authority respect - Master
  • Technical knowledge - Complete understanding of risk and compliance audits((ISO27001, SOX, HIPAA, GLBA, PCI DSS, SSAE16 etc.) - Expert

• Behavioural Competencies
  • Strategic perspective
  • Technology Acumen
  • Communication and Presentation Skills
  • Problem Solving approach
  • Managing Complexity
  • Client centricity

Deliver