Justdial - Compliance & Audit Engineer - Information Security & Risk Management

Job Description : Key Responsibilities : Regulatory Compliance : - Understand and apply regulations, guidelines, and industry best practices to manage risk and ensure compliance. - Develop, maintain, and audit security documentation, including policies, standards, and procedures. - Guarantee compliance with standards such as NIST 800-53, NIST 800-171, ISO 27001, SOX, PCI, HIPAA, and other regulatory requirements. Risk Management : - Manage and support the Information Security Risk Management Life-cycle. - Identify deviations from standards, assess risk levels, and recommend mitigation measures. - Provide corrective treatment of risks and compliance concerns from both internal and external perspectives. - Conduct internal security assessments to ensure compliance. Security Expertise : - Manage advanced security tools like Endpoint Security, Network Security, SIEM, SOC, SOAR platforms, and Vulnerability Management. - Develop expertise in Application Security and Risk Management. - Monitor the effectiveness of internal controls and procedures. IT Compliance Communication : - Promote awareness of standards of conduct. - Educate stakeholders about IT compliance policies, issues, and preventive measures. - Develop action plans to resolve compliance vulnerabilities. Minimum Eligibility : Educational Qualifications : - Graduate/Postgraduate with a minimum of 6 years of relevant experience in Cybersecurity & Risk Compliance. Technical Skills : - Implementation knowledge of ISO 27001 standards. - Proficiency in Security Risk Assessments, Vulnerability Management, and Compliance Management. - Expertise in ITDR Management, Cloud Security (AWS/Azure), and OT/IoT Security. Certifications : - Possessing certifications such as CISSP, CISA, CRISC, or CISM is preferred. Soft Skills : - Excellent communication, presentation, and stakeholder management skills. (ref:hirist.tech)

Location: bangalore, IN

Posted Date: 11/20/2024