Agilysys, Inc. Looking for IT Governance / Process Specialist 1-5 yrs at Chennai, Tamil Nadu

Agilysys, Inc.; Chennai; On-site; INR 6,00,000 - 10,00,000; Full time

Job summary

Join a forward-thinking company as an Information Security Governance Risk and Compliance Analyst, where your expertise will help shape the security landscape. In this dynamic role, you will support SOC2, PCI, and quarterly audits while performing critical security and IT controls testing. Collaborate with stakeholders globally to identify gaps and develop solutions that enhance compliance and reduce risks. This is an exciting opportunity to contribute to a culture of innovation and excellence in the hospitality technology sector, ensuring that security measures are robust and effective. If you are passionate about information security and thrive in a fast-paced environment, this role is perfect for you.

Qualifications

• 2-4 years of experience in information security and compliance.
• Knowledge of IT controls and multiple computing platforms.

Responsibilities

• Review vendor SOC reports and assist control owners in developing processes.
• Conduct testing of IT Controls for SOC 2, PCI, and SOX.

Skills

Information Security

Compliance (PCI, SOX, SOC)

Risk Management

IT Controls Testing

Azure

Windows

Linux

Networking

Communication Skills

Problem Solving

Education

Bachelor's Degree

Relevant Security Certification (CISSP, CISA, etc.)

Tools

GRC Toolsets

Security Questionnaires

Job description

About Company

Agilysys is well known for its long heritage of hospitality-focused technology innovation. The Company delivers modular and integrated software solutions and expertise to businesses seeking to maximize Return on Experience (ROE) through hospitality encounters that are both personal and profitable. Over time, customers achieve High Return Hospitality by consistently delighting guests, retaining staff and growing margins. Customers around the world include branded and independent hotels; multi-amenity resort properties; casinos; property, hotel and resort management companies; cruise lines; corporate dining providers; higher education campus dining providers; food service management companies; hospitals; lifestyle communities; senior living facilities; stadiums; and theme parks. The Agilysys Hospitality Cloud combines core operational systems for property management (PMS), point-of-sale (POS) and Inventory and Procurement (I&P) with Experience Enhancers that meaningfully improve interactions for guests and for employees across dimensions such as digital access, mobile convenience, self-service control, personal choice, payment options, service coverage and real-time insights to improve decisions. Core solutions and Experience Enhancers are selectively combined in Hospitality Solution Studios tailored to specific hospitality settings and business needs. Agilysys operates across the Americas, Europe, the Middle East, Africa, Asia-Pacific, and India with headquarters located in Alpharetta, GA. For more information visit www.Agilysys.com.

Position: Information Security Governance Risk and Compliance Analyst

At Agilysys, Inc. we are proud of our 3,000+ customers including some of the world’s most recognizable resort, casino and cruise line brands. We specialize in market-leading point-of-sale, property management, inventory and procurement, and mobile and wireless solutions that are designed to streamline operations, improve efficiency and enhance the guest experience. We serve casinos, resorts, hotels, food service venues, stadiums, cruise lines, grocery stores, convenience stores, general and specialty retail businesses and partners. With extensive operations across North America, Europe, Asia-Pacific, and India with headquarters located in Alpharetta, GA, we are growing. For more information, visit: www.agilysys.com.

The Information Security Governance Risk and Compliance Analyst reporting to the Governance Risk and Compliance manager will support SOC2, PCI, and quarterly audits. You will also be performing security and IT controls testing across all information technology disciplines. You will leverage industry best practices and business needs to help advance the compliance program and support the information security risk management program. The Analyst will work with stakeholders across the enterprise to identify gaps, and work with owners to develop timely solutions to reduce IT security risk across the organization.

Your duties will include:

1. Review vendor SOC reports for appropriate IT controls, as part of the Vendor Risk Monitoring program.
2. Review process documentation and assist control owners to develop repeatable processes, help create flow charts, and procedures to remediate control gaps.
3. Collect and report on remediation plans along with charting progress of open risk items to resolution.
4. Conduct testing of IT Controls for SOC 2, PCI and SOX to identify and evaluate risk exposures and determine the effectiveness of relevant controls.
5. Maintain security configuration standards for systems and business applications.
6. Assist in maintaining the GRC toolsets and responding to security questionnaires.
7. Participate in risk management / third-party risk management activities.
8. Create status reports for management on open findings.
9. Keep senior team members apprised on the status of information security issues and initiatives.
10. Other duties as assigned.

Requirements for success:

1. 2 to 4 years of experience in information security experience.
2. Experience with compliance requirements for PCI, SOX, and SOC.
3. Knowledge of multiple computing platforms including Azure, Windows, Linux, networks, and endpoints.
4. Knowledge of a wide variety of information security concepts, services, and technologies.
5. Experience working in a global organization with stakeholders located across the globe.
6. Experience in External audits – SOC, PCI audits, ITGC controls and Risk management frameworks. Good knowledge on SSDLC.
7. Ability to problem solve and manage business needs/IT changes in a rapidly changing complex technical environment.
8. Excellent verbal and written communication skills to technical and non-technical audiences of various levels in the organization.
9. Proficiency in establishing and maintaining effective working relationships with coworkers.
10. CISSP, CISA, SANS GIAC, or relevant security certification(s) is a plus.