Consultant -GRC
Posted Updated
Description
<p class="MsoNormal"><b>Designation : Consultant -GRC </b><o:p></o:p></p><p class="MsoNormal"><b>Certifications,
Qualification and Experience</b>:<o:p></o:p></p><ul type="disc">
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:8.0pt;
line-height:105%;mso-list:l1 level1 lfo1;tab-stops:list 36.0pt">Bachelor / PG degree
with any of the certifications - ISO 27001, CBCP, CISA, CISM, CRISC, CISSP<o:p></o:p></li>
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:8.0pt;
line-height:105%;mso-list:l1 level1 lfo1;tab-stops:list 36.0pt">2 years to 20 years of
applied work experience in cyber security programs, audits, assessments,
risk, remediation, or cyber security compliance management.<o:p></o:p></li>
</ul><p class="MsoNormal"><b>Job
Description:</b><o:p></o:p></p><ul type="disc">
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:8.0pt;
line-height:105%;mso-list:l0 level1 lfo2;tab-stops:list 36.0pt">Implements security
controls, risk assessment framework (ISO 31000, NIST), and program that
align to regulatory requirements, ensuring documented and sustainable
compliance that aligns and advances client business objectives.<o:p></o:p></li>
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:8.0pt;
line-height:105%;mso-list:l0 level1 lfo2;tab-stops:list 36.0pt">Evaluates risks and
develops security standards, procedures, and controls to manage risks.
Improves client security positioning through process improvement, policy,
automation, and the continuous evolution of capabilities.<o:p></o:p></li>
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:8.0pt;
line-height:105%;mso-list:l0 level1 lfo2;tab-stops:list 36.0pt">Implements processes,
such as GRC (governance, risk and compliance), to automate and
continuously monitor information security controls, exceptions, risks,
testing. Develops reporting metrics, dashboards, and evidence artifacts.<o:p></o:p></li>
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:8.0pt;
line-height:105%;mso-list:l0 level1 lfo2;tab-stops:list 36.0pt">Defines and documents
business process responsibilities and ownership of the controls in GRC
tool (e.g. ServiceNow GRC, Archer, OneTrust, SAP GRC). Schedules regular
assessments and testing of effectiveness and efficiency of controls and
creates GRC reports.<o:p></o:p></li>
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:8.0pt;
line-height:105%;mso-list:l0 level1 lfo2;tab-stops:list 36.0pt">Updates security
controls and provides support to all stakeholders on security controls
covering internal assessments, regulations, protecting Personally
Identifying Information (PII) data, and compliance such PCI DSS, SOX,
SOC2, HIPAA, RBI Guideline, ISO standards<o:p></o:p></li>
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:8.0pt;
line-height:105%;mso-list:l0 level1 lfo2;tab-stops:list 36.0pt">Performs and
investigates internal and external information security risk and
exceptions assessments. Assess incidents, vulnerability management, scans,
patching status, secure baselines, penetration test result, phishing, and
social engineering tests and attacks.<o:p></o:p></li>
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:8.0pt;
line-height:105%;mso-list:l0 level1 lfo2;tab-stops:list 36.0pt">Documents and reports
control failures and gaps to stakeholders. Provides remediation guidance
and prepares management reports to track remediation activities.<o:p></o:p></li>
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:8.0pt;
line-height:105%;mso-list:l0 level1 lfo2;tab-stops:list 36.0pt">Assists other staff in
the management and oversight of security program functions.<o:p></o:p></li>
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:8.0pt;
line-height:105%;mso-list:l0 level1 lfo2;tab-stops:list 36.0pt">Trains, guides, and acts
as a resource on security assessment functions to other departments within
Client sites.<o:p></o:p></li>
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:8.0pt;
line-height:105%;mso-list:l0 level1 lfo2;tab-stops:list 36.0pt">Remains current on best
practices and technological advancements and acts as the Client’s
technical resource for security assessment and regulatory compliance.<o:p></o:p></li>
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:8.0pt;
line-height:105%;mso-list:l0 level1 lfo2;tab-stops:list 36.0pt">Performs other related
duties as assigned.<o:p></o:p></li>
</ul><p>
</p><p class="MsoNormal"><o:p> </o:p></p>