This is a permanent, full-time role, as an individual contributor in a team of 5.
Responsibilities
- Define, enhance and demonstrate company’s point of view and delivery towards our approach of cybersecurity-focused services
- Guide the end-users on Governance, Risk and Compliance aspects of Security Management
- Work with various teams within Client to fulfill security requirements to establish compliance and document risks
- Participate in Project activities and guide Project teams to remediate new and outstanding issues
- Support Auditors and Audits in providing relevant details necessary to show Compliance statuses
- Participate in overall security governance programs and provide quality of service to ensure security standards
- Participate in design activities and provide various solutions to ensure security is not compromised at various phases of the program lifecycle
- Recommend and provide templates where possible for end users to assist in minimising the security risks
- Responsible for procedures and controls to assure compliance with applicable regulatory and legal requirements, and good business practices
- Establish and oversee formal risk analysis and self-assessment programs for various Information Services processes
- Ensure compliance with Banking Regulatory Compliance (BFSI), HIPAA, PCI and the NC Identify Theft law
- Establish and oversee a formal vulnerability and testing program
- Manage to remediate new and outstanding issues; track security-related issues
- Maintain expertise on security trends through training, research and development in order to mitigate exposures
- Manage, coach, lead and develop a small/mid-staff GRC personnel
Requirements
- Bachelor's degree in computer engineering
- At least 10 years of experience as Principal Consultant, with at least 5 years as a Consultant in Cybersecurity
- Hands-on experience in GRC implementation
- Understanding of cybersecurity concepts and risks
- Knowledge on CIS security standards and guidelines in guiding the team for establishing compliance
- Knowledge and understanding of the attack vectors to provide solutions during design phase to the programs on minimising them with appropriate security controls
- Strong familiarity with industry frameworks such as ISO standards, GDPR, NIST, PCI, DSS, CISO
Preferred Requirements
- CISA certified
- CISSP certified
- CRISC certified
