Job Description

Position description - Act as an Information Risk and Control trusted advisor Understand Technology Landscape (Application and Infrastructure) and proactively review Organization\'s information security and related threats and vulnerabilities, legal and regulatory requirements. Review and advise on information security risks of vendor offerings - New/leveraging existing (SAAS / PAAS/IAAS) services including integration with Organization environment. Translate Technical, legal and Regulatory Compliance obligations into a cohesive collection of Security Controls. Provide respective stakeholders with the IRM requirements and its implementation methodologies. Work with Project Managers, Business Analysts, Architecture and Support Team to ensure Organization IRM standards are being followed. Ensure all the controls outlined for an application/Infrastructure are designed effectively. Review VA-PT results and recommend the risks to be remediated. Ensure all the risks are documented, classified and addressed with appropriate action as per the IRM standards. Drive education and awareness of Information security related issues and risks to Business/Business IT Teams, Support in development of tooling to support IRM processes and ensuring it\'s fit for purpose. Actively participate in reviewing and improving the Information Security Controls implemented in the organization. Active participate in the Assurance and Architecture level discussions in the engagements. Actively participate in IRM team and community meetings, representing IRM and Business interests in applying setting standards and policies for the Group and the businesses, leading to a fit for purpose, evergreen IRM framework.

Monster