Siemens Energy Looking for IT Risk & Compliance Manager at Gurgaon, Haryana Full Time

Location: Gurgaon

Department: Siemens Energy Information Technology

Mode of Employment: Permanent

Job Position: IT Risk & Compliance Manager

Role: Individual Contributor

LET’S TALK ABOUT YOU

Your profile

• Bachelor’s / Master’s degree in technology
• 7+ years of total experience of which minimum of 4 years in an IT Compliance, Information Security, Internal Audit or similar role supporting IT SOX compliance efforts among other company compliance initiatives. Experience implementing enterprise information security programs based on industry frameworks such as COSO, COBIT, NIST, SOX etc. Relevant experience in Business Continuity and Disaster Recovery for varied industry segments preferred.
• Experience implementing enterprise information security programs based on industry standards ISO 27001/27002, ISO22301
• Strong experience in driving / leading IT control reviews, security, vulnerability topics including disaster recovery planning and testing, penetration tests, or assessments and evaluations.
• Strong working knowledge of IT processes, risks, and controls in the computer operations, system development, change control, and security functions.
• Ability to clearly interpret and communicate the IT threats, risks and impacts to all levels of the organization to support business continuity planning.
• Strong project management abilities as well as excellent oral and written communication skills, both verbal and written. Excellent business report writing skills.
• Excellent cross group collaboration skills.
• Experience with regulations, policy, standards, procedures or other requirements which requires IT compliance (e.g. PCI-DSS, Data Privacy, HIPAA).
• Knowledge of a broad range of security technologies including NextGen Firewalls, DLP, NAC, IDS/IPS, Certificate Management, Identity & Access Management, Privileged Identity Management, Multi-Factor Authentication, Mobile Device Management, Endpoint protection, SIEM, Anti-malware, Vulnerability Management, etc.
• Experience performing IT control assessments over one or more of the following technical areas: Mainframe, UNIX, Windows, SQL Server, Oracle DB, Cloud Technology, or a major ERP application (e.g. SAP, PeopleSoft or Lawson) is preferred.
• Experience working with SharePoint and GRC tools is a plus.
• CISA, CISM, CISSP, CRISC or other relevant security-certification(s) is desirable.

Your responsibilities

• Responsible for development, implementation and management of certification and compliance of the IT organization’s compliance with IT General Controls (ITGCs), SOC reporting controls, and other laws and regulations governing the Company
• Risk Manager will oversee the organizations comprehensive insurance and risk management program, assessing and identifying risks that could impede the reputation, safety, security, or financial success of the organization
• Analyze, evaluate, and quantify risks by:
• Performing qualitative analysis of risks and conditions to prioritize their effects on project objectives.
• Evaluating probability and consequences of risks and quantifying their implications on project objectives.
• Control risks by developing and implementing a mitigation strategy for each risk that is recorded in a risk register. The mitigation strategy with identified owner and risk allowance would:
• Tolerate the risk by not doing additional work
• Terminate the risk by eliminating the cause
• Treat the risk by undertaking work
• Transfer the risk by transferring to relevant third-party
• Monitor risks and mitigation strategies by conducting formally scheduled reviews at key project milestones.
• Plans, designs and executes compliance testing, controls assessment and documentation supporting information security Frameworks (e.g. NIST Cyber Security Framework, ISO, ITGCs, PCI-DSS, Data Privacy, HIPAA) and other compliance requirements such as Disaster Recovery assessments, as applicable
• Partners with the IT Infrastructure and Application teams to evaluate the design and effectiveness of the IT control environment and to develop and track the status of remediation efforts
• Strong understanding of the planning, development, program execution, maintenance and testing of Enterprise Business Continuity, Disaster Recovery, and Crisis/Incident Management programs
• Support the identification of Business Continuity related risks (internal / external), the assessment of their likelihood, as well as potential impacts and risk mitigation plans.
• Facilitates and coordinates with internal and external IT auditors
• Provides accurate, timely communications to Global IT Security Leadership and impacted management to discuss identified deficiencies, leading practices and recommendations for implementation of modifications to improve compliance and mitigate risks
• Reviews testing and analyses performed, monitors evidence gathering for IT control reviews, evaluates results, and confirms conclusions about the adequacy of IT controls, Disaster Recovery preparedness, and vulnerability assessments. Reviews the work performed and conclusions according to departmental standards
• Supports IT leadership in responding to internal and external queries regarding the IT control environment, Disaster Recovery Planning, and general IT Assurance topics.
• Upholds the Siemens Energy Code of Conduct

Your opportunities for personal growth

• be part of an international, multicultural and diverse team
• work independently
• work creatively

LET’S TALK ABOUT US

“Let’s make tomorrow different today” is our genuine commitment at Siemens Energy to all customers and employees on the way to a sustainable future.

In our Business Functions we enable our organization to reach their targets by providing best-in class services and solutions in the areas of IT, HR, Finance, Real Estate, Strategy & Technology and more.

[Department Information]

MORE INSIGHTS

Be Energized. Be you.

Lucky for us, we are not all the same. Through diversity we generate power. We run on inclusion and compassion. Our combined creative energy is fueled by at least 130 nationalities. Siemens Energy celebrates character – no matter what ethnic background, gender, age, religion, identity, or disability. We energize society. All of society.