Senior GRC Consultant

1.     Experience in Risk domain- Audits, Control testing

2.     Understanding of Business Impact Analysis

3.     Review of legal documentation

4.     Knowledge of Cloud-based technologies such as IaaS and Saas solutions, emphasizing information security control and data protection requirements

5.     Comprehension of the risks that exist in a business and security environment comprised of multiple global geographies and suppliers.

6.     Minimum two years recent experience performing information systems audit or information security reviews

7.     Experience in defining and implementing IT security policies and procedures

8.     Certification in CISA / CISM / CISSP / ISO27001, etc.

9.     Knowledge of OT Cyber Security tools such as IDS, Vulnerability assessment, Secure Remote solution, Application whitelisting, etc.

10.  Facilitate and maintain audit evidence and closure of audit findings for all Internal Audits that include; Internal Controls Framework, Enterprise Risk Management – ERM, NCA-OTCC, ISO 27001, and Corporate Governance Audits

11.  Experience in IT network security assessment, Network segmentation design and implem entation

12.  Program Management skills for coordination with key project sponsors and sites leads