Cyber Security Governance, Risk and Control
- DNEG
- 8 to 12 Yrs
- Other Haryana
- 2 months ago
- Email to a friend
- Report this job
Job Description
- Ankura is a team of excellence founded on innovation and growth. Responsibilities Executing IT security risk assessments using industry standards and frameworks (e.g. NIST, ISO/IEC 27002, etc), data security and privacy regulations (e.g. PCI, HIPAA). Identification, measuring, communicating, and prioritizing information security risks across the enterprise using a common framework that would be used for communicating our information security posture with clients. Manage action plans in response to information security risk assessment, track status, and report to IT security leadership. Interact with internal audit, third-party auditors, and appropriate regulatory bodies and participate in all internal and external audit projects. Oversee the validation of risk assessments, process and technology control designs, control gap identification, test scripts and evidence and identification of compensating controls. Manage the IT remediation process, including tracking and resolving findings from internal and/or external audits, risk assessments, self-reported items, and other control assessments. Assist in the annual policy review cycle. Assist in conducting third party vendor risk management activities for our vendors that includes review of contractual agreements as well as information security questionnaires. Conducting control checks against policies and standards of both technology environments and business processes. Experience of running Information Security Awareness programmes. Provide effective support to the business in the provision of third-party assurance reviews. You'll be skilled in writing a range of documentation, relevant for the business, ranging from processes and procedures to reports, standards and frameworks. Supporting and lead the embedding of controls identifying weaknesses and improvements as necessary and driving resolution. Supporting the improvements to the Holistic Cyber Security Framework Supporting from wider team, verify services are delivered in accordance with agreed business specifications and in compliance with legal and regulatory requirements. Qualifications Knowledge of cloud security An understanding of information security frameworks and standards such as Cyber Essentials, SOC2, NIST and ISO 27001. Excellent problem-solving and analytical skills. Effective communication and collaboration abilities. Education Degree in information security or similar field. 8-10 yrs of experience with 2+ years of broad information security experience. Certifications: Nice to have Qualified Security Assessor (QSA), Certified Information Systems Auditor (CISA) Certified Information Systems Manager (CISM) Certified Information Systems Security Professional (CISSP) ,
Employement Category:
Employement Type: Full timeIndustry: IT Services & Consulting
Role Category: Not Specified
Functional Area: Not Specified
Role/Responsibilies: Cyber Security Governance, Risk and Control
Contact Details:
Company: AnkuraLocation(s): Other Haryana
Keyskills: data security privacy regulations internal audit policy review cloud security analytical skills communication collaboration vendor risk management problemsolving
DNEG
DNEG CREATIVE SERVICES PVT. LTD. We are DNEG We are one of the world's leading visual effects, animation and stereo conversion companies for feature film and television, with studios in London, Vancouver, Mumbai, Los Angeles, Chennai, Montréal, Chandigarh, Hyderabad and Goa. Since the o...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in