Mphasis Hiring For Manager – IT Governance, Risk & Compliance (GRC) at India ,

Mphasis; Pune City; On-site; INR 12,00,000 - 18,00,000; Full time

Job summary

Join a dynamic team at a leading firm where your expertise in information security can shine. This role involves performing crucial internal security risk management and audits, ensuring compliance with ISO 27001 standards. With over 12 years of IT experience, including 10 years in security risk management or audit, you will interface with clients and enhance their security posture. Your insights will help identify risks from emerging technologies and recommend best practices for continuous improvement. If you're passionate about safeguarding information and driving security initiatives, this opportunity is perfect for you.

Qualifications

• 12+ years of IT experience with 10 years in Security Risk Management or Audit.
• Mandatory certifications like CISA, CISM, ISO27001 are required.

Responsibilities

• Conduct internal security risk management and audits per ISO 27001.
• Identify and prioritize information security risks through assessments.

Skills

Information Security Audit

Risk Management

ISO 27001

CISA Certification

CISM Certification

Technical IT Roles

Network Security

Education

Graduate

Post Graduate

Diploma Holder

Job description

Responsibilities:
This broadly includes:

• Perform internal security risk management and Information Security Audit activities in line with ISO 27001 on technology controls, security architecture and design
• Front-end Client and External audits
• Interface with client’s security and risk teams on assessments and reviews
• Identify and prioritize information security related risks through proactive risk assessments
• Assess risks from emerging technologies and design adequate controls and processes
• Identify gaps and recommend controls to mitigate the same
• Study & recommend industry best practices, latest trends for continuous improvement of information security

Experience required:
Overall IT experience 12+ years with at least 10 years Security Risk management and/or Audit management is recommended.
Qualification:

• Graduate / Post Graduate / Diploma holder (Full time)/Engineer
• Full-time work experience in information security management and/or related functions (such as IT audit and IT Risk Management).
• Typically, a background in technical IT roles such as IT service engineer and network security engineer.

Key pre-requisites:

• Mandatory CISA, CISM, ISO27001, etc. Technical certifications are a plus.