About this role
Support and drive activities pertaining to InfoSec � Audit, Assurance & compliance. Support for Internal, external & Client audit.
Primary Responsibilities:
• Activities pertaining to InfoSec – Audit Assurance- First Line Compliance (including but not limited to): • Regular reviews of Policy, Process reviews basis cyber security best practices & standards • Pro-active regular assessment of cyber technology capabilities (including tools & technologies) • Security assurance on new and existing applications (On prem applications and Cloud – SaaS, PaaS etc.) • Prepare and publish regular dashboards, management assurance reports, KPIs, automations and simplification of processes • Managing internal and external reporting as well as various functional dashboards • Stakeholder management to ensure timely availability of required inputs • Tracking and reporting of sub functional planned activities to higher management
Technical Skills:
• Good understanding of Information Security and Compliance, Risk Frameworks • Knowledge of current best practice management tools and techniques • Strong stakeholder management skills • Basic knowledge of Networking, Systems, Voice and business applications • An industry recognized certification like LA27001, CEH, CISSP, PCIDSS, CISA / CISM is an added advantage
Process Specific Skills:
• Strong domain understanding of IT outsourced business model • Capable of managing project tasks individually and as a team • Ability to document and explain technical details in a concise & understandable manner • Ability to interface and communicate at all levels within EXL and Client organizations • Understanding of Enterprise Business Processes, IT Process, Compliance frameworks is vital • Knowledge of auditing standards
Soft skills:
• Good presentation and interpersonal skills. • Excellent problem-solving skills in a cross functional environment • Strong verbal and written communication skills • Strong customer service orientation ability to connect with global customers and work with Global teams • Good listening and consultative skills
Support in maintain certifications like ISO 27001, PCIDSS, HITRUST, SOC. Ensure timely closure of audit Gaps. Proactively identify security Risk and prepare a mitigation plan and track till closure.
Bachelor Degree (Computer Science, Information Security, or related field). 8 - 10 Years