Consultant - Process Consulting

Job highlights

• Preferred certifications: CISA,CISM,ISO27001 Lead Auditor / Implementor .
• Assist in Compliance testing as and when required

Consultant - Process Consulting

Execute client-facing consulting projects to ensure compliance with various information security standards such as ISO27001, PCIDSS, SOC 2, GDPR, etc., conducting thorough assessments and audits while assisting in compliance testing and report preparation.

Gurugram, Haryana

Gurugram, Haryana

Apply Now

Responsibilities

• Execute client facing consulting projects related to ISMS (ISO27001), PCI DSS, IT Audit/ Assurance, SOC 2, GDPR and other compliance requirements
• Perform Information Security related assessments to cover domains like User Access management, Network, OS Application Security, Encryption, Backup Management, Disaster Recovery, Physical Security, Training Awareness etc
• Perform information security audits for vendors/ suppliers
• Perform Gap Assessments for PCI DSS, SOC 1 and SOC 2, GDPR, HIPAA, ISO 27001:2022, RBI Audits and deliver GAP reports with recommendations
• Perform Internal audits, risk assessment
• Create Policy procedures for Information security and relevant compliance requirements for clients
• SSAE-18 SOC 2 and SOC 1 report preparation and review
• Draft compliance reports to summarize the compliance objectives, key findings, and work with teams to remediate key findings
• Assist in Compliance testing as and when required

Qualifications

• Bachelors/Master s degree in Technology (Cybersecurity), Information Security, Computer Applications, or related field
• 2-5yrs of experience in compliance assessments, regulatory audits, risk assessments and developing and implementing Information security frameworks and processes
• Strong understanding of PCI DSS, ISO standards, GDPR, HIPAA, SOC, and industry-specific compliance requirements
• Familiarity with conducting gap analyses and developing remediation plans
• Preferred certifications: CISA, CISM, ISO27001 Lead Auditor/Implementor
• Excellent communication skills to convey complex regulatory requirements to stakeholders
• Strong analytical and problem-solving skills for effective risk mitigation