Information Security (GRC) Professional

Job Summary

The resource will develop and implement a structured framework to systematically assess the gaps/observations against applicable regulatory and industry standards.

Responsibilities

• This will include identifying control gaps, evaluating their associated risk impact, and providing practical, prioritized remediation recommendations aligned with both business objectives and regulatory expectations.
• The framework will be developed by mapping and harmonizing requirements from the IRDAI Cyber Security and ISNP Circulars, ISO/IEC 27001 standards, and Edelweiss Life Insurance s internal policies and processes establishing a unified control baseline to eliminate duplication and ensure comprehensive regulatory coverage.
• Identified gaps will be classified into regulatory non-compliance, partial compliance, and process gaps.
• A remediation roadmap will be developed for each identified gap, outlining the recommended remediation actions, assigned ownership (Business, IT, or Security), and defined timelines for closure.
• The framework will be designed to support periodic reassessments and ongoing regulatory inspection readiness.
• To conduct quarterly meetings to review assessment outcomes, track remediation progress.
• Resource will be SPOC for all information security audits, performing third-party reviews, managing ongoing compliance and maintenance activities, preparing reports, and maintaining the risk register

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.