Position: GRC Auditor - Experienced
Job ID: GRC_002
Location: Dombivli, Thane
Your responsibilities as a GRC Auditor - Experienced:
- Design Policy & Procedure Documents as per client’s domains and regulatory requirement.
- Review existing cyber security controls and guide the customer for implementing missing controls.
- Perform Risk Assessment and prepare Risk Treatment plan for the client.
- Design and implement ISO 27001 ISMS for clients in various domains.
- Perform gap assessment and audits for clients as per RBI, SEBI, IRDAI, UIDAI, etc. regulatory compliances.
- Prepare Standard Operating Procedures for various types of audit and implementation projects.
- Train freshers with Cyber Security concepts along with ISO 27001 and various regulatory compliances.
- Review deliverables of junior team members before releasing to the clients.
- Handle client communications and provide monthly/weekly MIS presentations for progress of the project.
Skill sets we require:
- ISO 27001 Implementation.
- Policy & Procedure Designing.
- Risk Assessment and Risk Treatment.
- Vendor Risk Assessment.
- RBI Compliance Audit (Good to Have).
- PCI Compliance (Good to Have).
- Data Localization Audit (Good to Have).
- Secure Network Architecture Review (Good to Have).
Pedigree and Experience:
- Graduate from any field/stream.
- Proven experience of 3 - 8 years into Consulting Audit.