IN_Associate_ISMS_Cyber Risk and Regulations_Advisory_Mumbai

Job description and Summary: To implement and assess the Information Security Management System (ISMS) and provide ongoing sustenance support to ensure its effectiveness and continual improvement.

· Experience in implementation ISO 27001:2022 standard · Support the rollout and maintenance of ISMS policies, procedures, and controls · Ensure alignment with ISO 27001 standards and regulatory requirements such as RBI , IRDA etc. · Provide IT and security audit support, assist in external certification audits and coordinate evidence collection. · Monitor KPIs and dashboards to track ISMS performance and compliance posture. · Conduct vendor security assessments as part of TPRM, track remediation and closure of vendor-related findings. · Conduct periodic access reviews to ensure least-privilege enforcement · Monitor ISMS effectiveness through periodic reviews and risk assessments · Oversee governance and closure tracking for penetration testing findings and application vulnerability assessments · Conduct awareness sessions for contractors on ISMS policies and security best practices. · Excellent presentation skills and ability to effectively communicate point of view at senior management levels Education: · Minimum Qualification: BE/ BTech · Postgraduates in any stream would be preferred (not mandatory) · Prior Big 4 experience would be an added advantage · Relevant experience in ISO 27001:2022 implementation or Audits · Excellent communication skills - both written and oral Certifications: · ISO 27001:2022 LI/ LA · CEH will be added advantage

Mandatory Skill sets:ISMS

Prefered skill sets:ISMS

Years of

Experience Required: 2-3 Years

Qualifications:BE