| GRC Consultant | Remote at Remote, Remote, USA |
| Email: [email protected] |
| From: Ambika, Technosphere Inc. [email protected] Reply to: [email protected] Job Description Skills required Functional experience in domain of Governance, Enterprise Risk Management and Regulatory Compliance. Experience in regulatory compliance like Payment Card Interface (PCI), Sarbanes-Oxley Act (SOX), UK/EU Data Protection Act, US Safe Harbor etc. A solid understanding of frameworks such as ISO 17799/27001/27002, COBIT, COSO. Extensive experience in IT Audits & Risk Management & IT Governance Experience in SSAE18 audits Good understanding of ITIL processes Good understanding of IT Infrastructure Services (Networks, EUC, DC, Backup & Storage etc.) Open to learning and working on new domains and technology Open to travel (50%-60%). Good written and spoken communications skills Ability to interact with Client Sr. Management (CIO, CTO, CISO) Be single point of contact for customers IT Audit & Compliance team for reporting, audit facilitation, evidence gathering & validation Performing independent Assessment & recommend mitigation strategies (after discussion with the technical teams) on clients Governance Risk & compliance environments. Participates in process and control documentation pertaining to IT infrastructure controls implementation. Participates in regulatory audits (process and IT) and management reporting. Ensuring that all contractual controls for IT operations are established & operational in delivery operations Understanding & facilitation of Change Management, Client Vulnerability Management Processes & ensuring that all changes are implemented as per schedule Gathering data for user ID reviews for access management Developing audit plans & compliance assurance plans for service delivery teams Regular trainings to delivery team members on compliance plans Development and implementation of operational and enterprise risk frameworks. Liaise on with Client counterparts for compliance reporting & continually enhancing the risk & compliance framework implemented for the project. Qualification B.E/B.Tech with MBA preferred CISA/ CISM/CISSP certification, ISO 27001 (Lead Auditor) preferred Keywords: information technology Idaho GRC Consultant | Remote [email protected] |
| [email protected] View all |
| Wed Jul 31 18:59:00 UTC 2024 |