Log In
Sign Up
IT Security
airtel Hiring For Sr. Executive (Information Security Risk & Compliance) at Gurgaon / Gurugram Full Time
Job Description
- Review of policy and procedure with implementation across organization
- In depth knowledge of risk management with good knowledge of handling external and internal risks
- Work with cyber risk quantification and integrate with existing risk management process.
- Should be able to quantify risks and define criticality.
- Work with the internal teams to build on an existing information security program and ongoing security projects that address information security risks and compliance requirements.
- Monitor and report on compliance with security policies, as well as the enforcement of policies.
- Ensuring operational compliances with regulations such as ISO 27001, ISO 22301, PCI-DSS, Data Privacy etc.
- Identifying risk and compliance posture of the client environment by reviewing reports such as: Vulnerability & Penetration testing, Patch Mgmt. Application Security. Cloud Security etc.
- Recommend and coordinate the implementation of technical controls to support and enforce defined security policies.
- Execute information security assessment, business continuity assessment, risk assessments pertaining to Airtel environment.
- Execute technical risk assessments around applications, control testing etc.
- Work with vendors to develop and implement strategies, policies, and processes to effectively manage third-party risks.
- :Risk Assessment and Due Diligence: Conducting risk assessments and due diligence activities on third-party vendors, govern all the TPRM activities, Create monthly PPT and share the TPRA update with LOB heads.
- This involves evaluating the information security and privacy compliance and operational resilience
- Analyze the potential risks and vulnerabilities associated with engaging third parties and recommend risk mitigation measures Ensuring operational compliances with data privacy regulations like GDPR and guiding the delivery managers on privacy by design and security by design principles
