Mphasis Limited Hiring For Manager – IT Governance, Risk & Compliance (GRC) at India Full Time

Responsibilities:
This broadly includes:

• Perform internal security risk management and Information Security Audit activities in line with ISO 27001 on technology controls, security architecture and design
• Front-end Client and External audits
• Interface with client’s security and risk teams on assessments and reviews
• Identify and prioritize information security related risks through proactive risk assessments
• Assess risks from emerging technologies and design adequate controls and processes
• Identify gaps and recommend controls to mitigate the same
• Study & recommend industry best practices, latest trends for continuous improvement of information security

Experience required:
Overall IT experience 12+ years with at least 10 years Security Risk management and/or Audit management is recommended.
Qualification:

• Graduate / Post Graduate / Diploma holder (Full time)/Engineer
• Full-time work experience in information security management and/or related functions (such as IT audit and IT Risk Management).
• Typically, a background in technical IT roles such as IT service engineer and network security engineer.

Key pre-requisites:

• Mandatory CISA, CISM, ISO27001, etc. Technical certifications are a plus.

Skills

Skills Required:

• Excellent exposure towards planning & conducting Information Security Audits
• Knowledge and practical application experience of information security best practices, such as ISO 27001/27002, PCI, SAS70, NIST standards and COBiT
• Working knowledge of security systems and applications and a strong foundation in core area of security (e.g. OS hardening, DB hardening, Active Directory, Firewalls, IDS, IPS, Router, SIEM, DLP, networks and cloud security) is preferred

• Knowledge of various control and risk management concepts and methodologies

• Strong interpersonal skills. Ability to influence leadership team internally and clients externally
• Communicate Security, risk, and control related concepts to a broad range of technical and non-technical staff both internal and external client

• Understanding of organization structure, and ability to work effectively with internal support functions and operational areas
• Strong written, communication and presentation skills
• Attitude to learning and development, a record of continuous professional development