Senior Analyst
About the role
• IS Audit and Controls Implementation, Client contracts review from InfoSec standpoint
• CISA/CISM/CRISC and ISO27001:2022 LI/LA/ISO 27701 (LI/LA)
• ISO20000/SSAE-18 SOC 1 SOC 2 /ITGC/PCIDSS/GDPR
• Experience in planning, execution and reporting of Information Security Audits and Security controls Implementation
• Experience of managing IS Risk Management framework
• Experience in managing SSAE-18 SOC 1 & SOC 2 Assessments, ITGC audits, PCIDSS, ISO 27001, GDPR Assessments and privacy assessments
• Must have any one of the certifications CISA/CISM/CISSP/CRISC/ISO27001:2022 LI/LA/ ISO 27701 LI/LA
• Experience in reviewing client contracts, security documents to identify IT and Security controls requirements
• Exposure in managing and responding to data privacy & security questionnaires, new RFPs from data security standpoint
• Experience in IS Audit and Implementation
• Exposure to ISO20000/SSAE-18/SOX-ITGC/PCIDSS/GDPR
• Must have worked in IS/IT Risk Management
- Must have any one of the Certifications CISA/CISM/CRISC and ISO27001:2013LA
- Must have CEH Certification and relevant experience
- Must have understanding of IT Infrastructure and Technologies
- Knowledge about IS/IT Governance will be an added advantage
- Good communication Skills written and verbal
- Professional discipline, teamwork and healthy competition
- Good customer interaction and result oriented