IT Advisory Risk Consultant

Randstad India; Bengaluru; On-site; INR 8,00,000 - 12,00,000; Full time

Job summary

A leading staffing and HR solutions provider in Bengaluru seeks an Information Security professional with over 2 years of experience in governance, compliance, and risk assessments. The role involves conducting security assessments, writing reports, and interacting with clients for compliance and security reviews. Familiarity with ISO and NIST standards is required. This position offers an opportunity to work in a dynamic environment and contribute to security improvement efforts.

Qualifications

• 2+ years of experience in Information Security Governance and compliance.
• Familiarity with BS ISO/IEC/SIG 27001 and NIST standards.
• Experience in performing third-party security assessments.

Responsibilities

• Perform regulatory gap assessments and provide remediation recommendations.
• Write detailed reports based on assessment discussions.
• Conduct quality reviews of reports by junior teams.

Skills

Information Security Governance

IT Risk Assessments

Vendor Security Assessments

Business Continuity Planning

Regulatory Compliance

Job description

Job Requirements

• Information Security Governance, Privacy and Compliance and Security Assessment experience with a focus on IT and IS Risk Assessments and program reviews / establishment.
• Understanding on ISO 27001/ NIST 800-53/ PCI-DSS
• Interacting with onshore engagements and clients directly performing Vendor or Third-party security assessments
• Business Continuity planning and Disaster Recovery implementation and review experience.
• Perform remote and gap assessments against regulatory requirements and providing recommendations to remediate the gaps.
• Independently write reports of the assessments based on the discussions during remote reviews.
• Perform second level quality review of the reports written by peers/junior resources

Profile

• 2+ years Information Security Governance, Privacy and Compliance and Security Assessment, experience, with a focus on IT and IS Risk Assessments and program reviews / establishment.
• Familiarity with and demonstrated experience assessing against the BS ISO/IEC/SIG
• 27002:2005 BS 7799 standard domains, BS 25999 including Risk Assessment; Security policy; Organization of Information Security; Asset Management; HR Security; Physical and Environmental Security; Communications and Operations Management; Access Control; IS Acquisition, Development and Maintenance; IS Incident Management; Business Continuity Management; and Compliance.
• Broad understanding of Information Security trends, services and disciplines and experience applying them in dynamic environments.