Job Summary
Governance, Risk and Compliance (GRC) – Risk & Compliance Lead
Key Responsibilities
• Performing independent Assessment & recommend mitigation strategies on client’s Governance Risk & compliance environments likeITGC, GDPR, German Data protection Act etc. • Participates in process and control documentation pertaining to controls implementation. • Participates in regulatory audits (process and IT) and management reporting. • Facilitates IT governance implementation. • Research and Development in best practices around core business processes, IT security. • Develop service offerings for various industry regulatory and compliance requirements. • Development and implementation of operational and enterprise risk frameworks. • Liaise on with Client counterparts for compliance reporting & continually enhancing the risk & compliance framework implemented for the project. • Drive & participate in different Risk, Compliance & Audit program and support all external/internal compliance assessment • Drive/assist closure of audit non-conformities • Monitor compliance with various contractual IT security requirements, customer policies/procedures • Ensure relevant data privacy controls were deployed and GDPR requirements are monitored • Point of contact for reporting & investigation of any relevant data breach • Perform assessment to ensure that data privacy requirements were met • Perform Delivery Center Assessment and submit report with mitigation/management response Years of Experience: • 10 + Years
Skill Requirements
• Performing independent Assessment & recommend mitigation strategies on client’s Governance Risk & compliance environments likeITGC, GDPR, German Data protection Act etc. • Participates in process and control documentation pertaining to controls implementation. • Participates in regulatory audits (process and IT) and management reporting. • Facilitates IT governance implementation. • Research and Development in best practices around core business processes, IT security. • Develop service offerings for various industry regulatory and compliance requirements. • Development and implementation of operational and enterprise risk frameworks. • Liaise on with Client counterparts for compliance reporting & continually enhancing the risk & compliance framework implemented for the project. • Drive & participate in different Risk, Compliance & Audit program and support all external/internal compliance assessment • Drive/assist closure of audit non-conformities • Monitor compliance with various contractual IT security requirements, customer policies/procedures • Ensure relevant data privacy controls were deployed and GDPR requirements are monitored • Point of contact for reporting & investigation of any relevant data breach • Perform assessment to ensure that data privacy requirements were met • Perform Delivery Center Assessment and submit report with mitigation/management response Years of Experience: • 10 + Years • Good written and spoken communications skills Good knowledge on Aruba ClearPass NAC integration with wired and wireless authentication along with Secure network access (Profiling and Posturing) • Good hands-on experience in administration of Zscaler proxy solution i.e. Zscaler Client connector, Traffic forwarding, authentication & Security policy configuration
Other Requirements
Qualification: • B.E/B.Tech CISA/ CISM/CISSP certification, ISO 27001 (Lead Auditor) preferred