Senior GRC Consultant; Governance, Risk & Compliance

Key Responsibilities

• Proven experience on leading and executing compliance & risk management processes
• Well versed and hands‑on experience for defining establishing and implementing policies, process and controls for compliances and Certification to ISO
  27001
• Strong foundation & experience on data privacy specifically catering to the requirements outlined in GDPR & DORA, NIS2
• Experience in conducting Privacy Impact Assessments, Security Breach management & executing privacy controls
• Expertise in Risk Management including conducting risk assessments, gap analysis and remediation
• Perform testing of internal controls specified in Information Security Policies and Perform internal audit reviews to assess the effectiveness of current information security control
• Experience in end to end ISAE 3402 SOC reporting
• Experience in performing remediation activities based on gaps found in audit reviews
• Conducting regular training for on Client Security Policy and Standard requirements.
• Present reports and recommendations on information security and related issues
• Ensure timely and effective corrective actions are taken to correct deficiencies and provide status reporting.
• Liaison with security & operational teams for ensuring confidentiality, integrity & availability of customer information
• Excellent understanding & experience in IT infrastructure management which includes Networks, Data Centre Operations, Service Management/Service Desk, Server Management etc.
• Regulations Knowledge: DORA, NIS2, GDPR, UK DPA, Privacy Shield

B.E/B. Tech (IT, CSE, Electronics) with MBA preferred. Candidates with following Certifications will be preferred:

• CISA/CGEIT/CISM/CISSP/CIPP/CIPM/CISSP

• Life insurance
• Private medical care
• Multi Sport Card
• Subsidy for glasses
• Subsidy to language courses
• Christmas and holiday bonuses
• Clear career path in a growing multinational organization