Information Security Associate

Crisil; Chennai District; On-site; INR 300,000 - 500,000; Part time

Job summary

A leading financial services firm in Chennai is looking for an Information Security Associate to conduct risk assessments and ensure third-party vendor compliance with security standards. This entry-level position involves collaboration with various internal teams to manage vendor risks, develop policies, and perform audits. Ideal for candidates aiming to start their career in information security within the IT consulting industry. Competitive contract terms available.

Qualifications

• Comprehensive risk assessments of third-party vendors.
• Due diligence on vendors to meet security standards.
• Continuous monitoring of third-party risk exposure.
• Review and manage vendor contracts for risk management.
• Develop and implement risk mitigation strategies.
• Alignment with best practices and regulatory requirements.
• Collaboration with internal teams for unified management.
• Ensure compliance with regulations like GDPR and ISO 27001.
• Perform periodic vendor audits.
• Assist in resolving third-party risks incidents.

Job description

Join to apply for the Information Security Associate role at Crisil

Continue with Google

3 days ago Be among the first 25 applicants

Join to apply for the Information Security Associate role at Crisil

• Conduct comprehensive risk assessments of third-party vendors, including evaluating their information security practices, operational capabilities, and compliance with legal and regulatory requirements
• Perform due diligence on prospective and existing vendors, ensuring they meet the organization's standards for security, privacy, and business continuity.
• Continuously monitor third-party risk exposure and create regular reports on the risk status of vendors. Identify and elevate potential issues to management.
• Review and manage vendor contracts, ensuring that appropriate risk management clauses and service-level agreements (SLAs) are in place.
• Collaborate with internal stakeholders and vendors to develop and implement risk mitigation strategies. Recommend corrective actions or improvement plans for third-party vendors with identified risks
• Assist in the development and maintenance of third-party risk management policies, procedures, and frameworks in alignment with industry best practices and regulatory requirements.
• Work closely with internal teams (e.g., Legal, Procurement, Compliance, IT Security) to ensure a unified approach to third-party risk management
• Ensure compliance with relevant regulations, standards, and guidelines (e.g., GDPR, ISO 27001, NIST, PCI-DSS) related to third-party risk management.
• Conduct periodic vendor audits to verify compliance with contractual obligations and organizational policies
• Assist in the investigation and resolution of third-party risk incidents, including data breaches or service disruptions.

Seniority level

• Entry level

Employment type

• Contract

Job function

• Information Technology

Industries

• IT Services and IT Consulting

Referrals increase your chances of interviewing at Crisil by 2x

Sign in to set job alerts for “Information Associate” roles.

Continue with Google Continue with Google

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.