Assistant Manager – Audit & Governance

Location: Delhi, India

Job Purpose

Provide a brief description of the general nature of the position; an overview of why the job exists; and what the job is to accomplish.

• This job involves performing the strategy defined in organisation with respect to Audit and Governance
• Ensure the Organisation is always compliant with respect to international standard, Customers and Regulatory requirements

Duties and Responsibilities

• Implement & manage the quality and information security system in organisation
  i.e. ISO9001 and ISO/IEC 27001
• Conduct MRM on regular basis
• Information security/risk/incident analysts or managers support the front-line defense of networks, protecting information from unauthorised access and violations
• Penetration testers or ethical hackers carry out tests on a system to expose weaknesses in security
• Monitor their organisations networks for security breaches and investigate a violation when one occurs
• Install and use software, such as firewalls and data encryption programs, to protect sensitive information
• Prepare reports that document security breaches and the extent of the damage caused by the breaches
• Conduct penetration testing, which is when analysts simulate attacks to look for vulnerabilities in their systems before they can be exploited
• Research the latest information technology (IT) security trends
• Help plan and carry out an organisation’s way of handling security
• Develop security standards and best practices for their organisation
• Recommend security enhancements to management or senior IT staff
• Help computer users when they need to install or learn about new security products and procedures
• Plan, implement and upgrade security measures and controls
• Protect digital files and information systems against unauthorised access, modification, or destruction
• Conduct internal and external security audits & maintain data and monitor security access
• Manage network, intrusion detection and prevention systems
• Analyse security breaches to determine their root cause
• Recommend and install appropriate tools and countermeasures
• Define, implement, and maintain corporate security policies
• Security awareness training
• Coordinate security plans with outside vendors
• Good Understanding towards Data compliance like GDPR, Data protection law in USA

Qualifications

• BE/ B. Tech/ MCA will be preferred.

Experience Required

• Proven relevant work experience as at least 8 years
• Hands on experience in Audit and Governance of 8 to 10 years

Skills and Abilities

• SKnowledge in Implementation and managing international standard like ISO 9001, ISO /IEC 27001, SOC1 & SOC2, CMMI etc
• Knowledge of CRM software and MS Office (MS Excel in particular)
• Understanding of International Standard like ISO 9001, ISO /IEC 27001, SOC1 & SOC2, CMMI etc
• Excellent communication and negotiation skills
• An ability to deliver projects relevant to area and answer inquiries on time
• Business acumen with a problem-solving attitude
• Ability to assess the risk to top management with mitigation strategy
• Ability to conduct VAPT in house

Professional Certification

• One or more relevant IT Security Certifications (CISA, CISM, CISSP, ISO27001 LA, ISO22301 LA Etc.) is must
• Preferable to have GDPR trained certifications

Competencies

• Integrity and sincerity
• Accountability
• Excellent communication
• Think & Act smart
• Proactive: Takes initiative
• Out of box thinker
• Attention to detail
• Leadership skills
• Team leader / Ability to build high performing teams
• Building Partnerships
• Building trust
• Customer Focus
• Decision making
• Managing Conflict
• Resourcefulness
• Teamwork & Collaboration
• Business acumen
• Mentoring & Coaching
• People management
• Assertiveness