Job Description

SN Required Information Details
1 Role Sr. GRC Analyst / Consultant
2 Required Technical Skill Set Experience in cybersecurity risk assessment, Control testing and Compliance audits
3 Desired Experience Range 6 to 10 Years
4 Location of Requirement Any location across India (Prefered Mumbai, Chennai, Delhi, Bangalore or Hyderabad)
Desired Competencies (Technical/Behavioral Competency)
Must-Have Technical:

• Security Framework Alignment and Related Controls Testing (NIST, CoBIT, ISO 27001)
• SOX Testing for IT Controls
• IT Compliance audits
• Vendor Risk Assessments
• Contribute to the enhancement/refinement of the Information Security Risks & Controls library
• Contribute to documentation of Information Security Policies, Standards, Processes, and Procedures.
• Manage and perform cybersecurity assessments on emerging/ongoing business initiatives, third-party services
• Evaluatethird-partyproducts/servicesbyreviewing standardizedquestionnaires,evidencingtheircontrols
• Keep pace with emerging technology, cyber threats, and industry trends around cybersecurity.

• Analytical thinker
• Collaborative team player
• Eexcellent written and verbal communication
• Capable of bridging the gap between business demands and cybersecurity requirements
• Ability to articulate cybersecurity risks in business terms
• Demonstrable knowledge of information security standards, data security practices and procedures
• Understanding of the impact of various data protection and integrity controls, operating systems and network security controls, authentication controls, and security protocols
• Requires demonstrable knowledge of security principles to a diverse range of risk scenarios to coordinate acceptable solutions between business needs, technology operations, and information security best practices