GRC Consultant
Infosec Train · Thiruvananthapuram · onsite · Posted 28d ago
Undisclosed2–3 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
The consultant shall be responsible for consulting engagements for the information security, business continuity, data privacy, and similar management systems service offerings. The role requires a strong background in Information Security, ISO 27000, ISO22301, ISO 27701, and similar standards and frameworks.
The role requires broad high level technical knowledge and the ability to recommend advisory solutions based on customer business problems or requirements.
Influencing organization, customers, suppliers, partners and peers in areas of expertise.
Advising on the available standards, methods, tools and technologies relevant to area of expertise and how business benefits can be realized.
Lead customer through consulting engagements by assembling information to determine, document and agree customer requirements, conducting AS-IS assessment in line with applicable standards and frameworks, conducting gap analysis and producing recommendations.
Defining, developing, and implementing policies, processes, and procedures aligned to standards, and frameworks.
Developing templates, guidelines and other job aids to use the implemented policies, processes and procedures.
Assessing and formulating tool requirements to execute the processes and ensuring that all the processes are institutionalized within the customer environment.
Conducting periodic compliance audits / assessments against defined processes and various compliance frameworks such as CIS, NIST, ISO 31000, ISO 22301, and ISO27000 series.
Reporting, ensuring and facilitating closure of all non-conformities by driving/initiating corrective actions within the customer environment.
Developing Metrics/KPIs and performing data collection related to the processes deployed, driving analysis and improvements based on recommendations
Contributing to internal best practices, processes and methodology documents pertaining to areas of specialization.
The role requires broad high level technical knowledge and the ability to recommend advisory solutions based on customer business problems or requirements.
Influencing organization, customers, suppliers, partners and peers in areas of expertise.
Advising on the available standards, methods, tools and technologies relevant to area of expertise and how business benefits can be realized.
Lead customer through consulting engagements by assembling information to determine, document and agree customer requirements, conducting AS-IS assessment in line with applicable standards and frameworks, conducting gap analysis and producing recommendations.
Defining, developing, and implementing policies, processes, and procedures aligned to standards, and frameworks.
Developing templates, guidelines and other job aids to use the implemented policies, processes and procedures.
Assessing and formulating tool requirements to execute the processes and ensuring that all the processes are institutionalized within the customer environment.
Conducting periodic compliance audits / assessments against defined processes and various compliance frameworks such as CIS, NIST, ISO 31000, ISO 22301, and ISO27000 series.
Reporting, ensuring and facilitating closure of all non-conformities by driving/initiating corrective actions within the customer environment.
Developing Metrics/KPIs and performing data collection related to the processes deployed, driving analysis and improvements based on recommendations
Contributing to internal best practices, processes and methodology documents pertaining to areas of specialization.
Key Personal Attributes:
- Client facing experience is a must.
- Pres-sales and delivery experience is a must.
- Interpersonal skills to interact in a team environment and foster client relationships.
- Ability to communicate technical risk issues effectively, to customers who may, at times, have a nontechnical background.
- Ability to write technical reports, detailed presentations and documentation.
- Demonstrable understanding of the importance of business ethics.
- Must be able to handle highly confidential information in a strictly professional manner.
- Must be able to maintain professional demeanor in times of high stress.
- Open to travel as per the job requirements. It would depend upon the assignment as well.
- Project management skills and an ability to translate business requirements into technical IT security deliverables.
Qualification and Skills:
- Extensive experience with ISO 27001 and ISO 27002 standards.
- Degree in Computer Science or Engineering (Master Degree is desirable).
- Accreditations/Certifications e.g. ISO 27001 LA/LI, ISO 22301 LA/LI, CISA,CISSP, PMP, CompTIA CASP, CRISC, CCSK.
- Extensive experience with performing security risk assessments.
- Ability to define and implement security processes across different departments and work with different stakeholders.
- Experience with Application Security controls, tools and processes.
- Experience with security monitoring and SIEM solutions.
- Experience with network, endpoint, server security.
- Familiar with common security vulnerabilities and mitigating techniques.
- Familiar with EU regulatory requirements as well as other relevant international security standards.
- Strong IT technical knowledge.
- Excellent communication skills both written and verbal.
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Skills
business continuitydata privacygap analysisCisagrcIso 27001Business RequirementsauditsnistcisspcriscEndpointCompTIAApplication SecurityData CollectionCommunication SkillsIT SecurityInformation Securitycompliance
About Infosec Train
Infosec Train
EdTech
85
employees
2017
9 years old
Bangalore / Bengaluru, Karnataka
India
₹8.2L PA avg
Avg at Infosec Train
About
Infosec Train is an IT security training and consulting organization offering best-in-class yet cost-effective customized training programs to enterprises across the globe.
Industries
EdTechEducation & Training
Employee ratings
10 reviews
4.6/ 5
Culture
4.8
Career growth
4.2
Work-life
4.7
Employees rate it well for
Overall Company46Work-Life Balance45
Find them on