Lead Engineer - Cyber Security

Mphasis; Maharashtra; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Mphasis is seeking a Security Compliance Auditor in Pune or Bangalore, India. The ideal candidate has 8+ years of experience in compliance and risk management to join the security organization.

You will assess policy design and implementation, lead audits against ISO27001/27002, COBIT 5, PCI DSS and GDPR, and coordinate corrective actions with internal and external stakeholders.

Qualifications

• 8+ years of experience in Compliance & Risk Management
• Deep knowledge of governance and audit
• Experience with corrective action programs
• Strong understanding of IT security policy, procedures, design and implementation
• Knowledge of ITIL, ISO 27001/27002/27701, COBIT 5, PCI DSS, GDPR

Responsibilities

• Perform evidence gathering to validate compliance and report audit findings
• Conduct internal audits for technical and process compliance
• Participate in IT security and process maturity audits
• Maintain documentation for security assessments and testing
• Assist clients to define security requirements and update policies
• Inform stakeholders of vulnerabilities or security breaches and propose mitigations

Skills

Cloud Security

Governance & Audit

Risk Management

Security Principles

CISSP

Education

Bachelor's degree in computer science or related field

Job description

Who Are We Looking For

Information Security compliance auditor are responsible for ensuring that the process, technology and business solutions are compliance with companys standards. Compliance auditor will be required to engage with internal and external stakeholders to achieve the goals of the company's security organization and business.

Job Description

Role

Security Compliance Auditor

Location

Pune or Bangalore, India

The role reports into the Cyber Operations Manager

Position Summary

• Experience 8 plus on Compliance & Risk Management
• Deep knowledge of Governance and audit
• Experience with implementation of corrective action programs
• Good Understanding of IT security policy, procedure, design, and implementation
• In depth Knowledge on frameworks including ITIL, ISO27002, SOX, PCI DSS, GDPR and COBIT 5.
• Deliver Managed Security Services in compliance with PCI DSS and framework compliance to COBIT 5
• Undertake risk classifications and registration in line with the core business principles and policies
• Conduct Technical and process compliance internal Audits
• Perform evidence gathering to validate compliance as required by Client, and report audit findings
• Participate in IT security and process maturity audits as required by Client
• Maintain documentation required for security assessments, audits and internal control and control testing.
• Security-related Incident handling
• Assist client to define Security requirements based upon Business needs and update their Information Security Policy
• Inform stakeholders immediately if becomes aware of any vulnerability or weakness in the Services or any Security breach, and recommends a possible solution or mitigation
• Comply with data and records management, and electronic records and data archiving as per IT Security policies and processes for company

Knowledge, Skills And Experience

• Extensive technical information security experience, including, but not limited to:
• Cloud Security
• ISO 9001
• ISO 27001, ISO 27002, ISO 27701
• COBIT 5
• ITIL
• GDPR UK DPA 2018
• Extensive knowledge and understanding of security controls and business process
• Able to work effectively in a team and across multi-functional teams
• Strong understanding of leading frameworks and standards
• Expert knowledge of security principles and technologies
• Excellent written and oral communication skills at all levels, strong communicator and ability to articulate and communicate complex IT-related business issues to senior staff
• CISSP, CISA, ISO27001 Lead Auditor, Iso 9001 Lead Auditor certified
• Good understanding of Risk Management and risk methodologies
• Bachelor's degree in computer science, MIS, Engineering or related field preferred, or demonstrable equivalent commercial experience, including any relevant security qualifications
• Automotive and retail industry experience an asset