Manager Information Risk Management and Audit, Remote India

July 26

Apply Now

Receive Emails with Similar Jobs

Proficio

WebsiteLinkedInAll Job Openings

Proficio provides 24/7 security monitoring, threat detection, alerting and response services.

Cloud-based Security • Risk • and Compliance • Managed Security Services • SIEM SaaS

51 - 200

Description

• Responsible for the development and overall management of the Information Risk Management and Audit function • Develop, implement, and maintain a sustainable internal and external information risk management and audit program across our customer's organization.

Requirements

• Working closely with internal and external stakeholders, implement, manage and continuously improve a sustainable internal audit program to monitor compliance with any adopted information security and privacy frameworks and standards such as Fedramp, NIST, ISO/IEC 27001, ISO 27701, SOC 2 and PCI DSS • Achieve ISO 27001 for the organization by implementing an ISMS that identifies, evaluates and appropriately manage internal and third-party security and privacy risks • Provide accurate, insightful and timely reporting to key stakeholders to enable appropriate and effective decision making and prioritization of risk treatment across the organization • Support and influence risk owners to remediate risk effectively in accordance with the organizational risk appetite and tolerance • Maintain contemporaneous and accurate records of existing and emerging risks • Keep up to date with regulatory, client and other compliance requirements and adjust the risk management and audit programs accordingly when required • Advise leadership, Data Protection Officers and other internal stakeholders on information risk introduced due to lack or failure of internal controls or new development in compliance requirements • Recommend and assist with the implementation of changes in policies to reduce the critical and high risks identified in risk assessment. Recommend physical, administrative and technical organizational measures to manage security and privacy risks • Regularly review and update the risk management policy and risk register • Provide expert opinion on risk management and stay updated on various security and privacy risk management best practices • Coordinate with the business lines and supporting functions IT, Privacy, Legal, and HR. In particular, cooperate cross-functionally with group business applications, product engineering, program management, IT infrastructure, and operations.

Benefits

• Health benefits, lunches, gym reimbursement, and internet funding for our India staff! • Opportunity to work in a progressive organization with structured training and roadmap for success • Experience in one of the hottest IT industries today