The Position

This is a critical role at the cusp of cyber security and data privacy. This individual will have a direct line of reporting to the Director as well as a dotted line of reporting to the Egon Zehnders Legal Counsel.

Key Result Areas

What will you do

- Provide response to Data Security and Protection Requests for client proposals (RFP), audit questionnaires and other documents to Egon Zehnder clients from an IT and data privacy perspective as received from business or legal team
- Work closely with various IT functions and Legal team to ensure that technical knowledge is maintained, and that RFP and other client response can be accurately and timely answered
- Assess gaps in policies, processes and cybersecurity technology while reviewing and responding to the above RFPs and come up with proposals and suggestions for their mitigation or risk reduction
- Stay updated and informed of the various Data privacy laws e.g. GDPR, CCPA and similar as mandated by various countries and assess them to identify and propose additional controls and policies for our local offices to remain compliant with the law of the land around IT and Cyber security.
- Collaborate cross-functionally with roles such as IT infrastructure, Digital/application development, and Legal to identify and highlight gaps and risks with existing applications and technologies around Cybersecurity and Data Protection laws.
- Be responsible for the adoption and implementation of standard frameworks e.g. NIST.
- Adopt current controls and align cybersecurity policies as per well-known standards e.g. ISO 27001 for reduced scrutiny and quick closures of RFPs.
- Actively participate in driving Risk management function around information and cyber security, maintenance of risk register, and work towards improving the risk maturity level of the firm.
- Assess risk imposed by technical solutions and advise business of security standards, best practice and solutions to address data security and protection risk.




- Actively participate in running internal data security and protection audits, which includes assessment and gap analysis of current IT security policies, processes, systems and controls.
- Be responsible for driving cyber and information security awareness and training campaigns globally for Egon Zehnder offices.

Experience and key Competencies

- Experience in RFI and RFP response in the area of Cyber Security Solutions including infrastructure security, security monitoring /analytics / incident-response, risk compliance management, identity access management and data security solutions
- 3- 5 years of Information Security, vendor risk management and/or other risk management experience preferably in banking or financial services industry
- Experience and affinity with data privacy laws namely GDPR
- Familiar with regulatory and industry standards such as NIST, ISO 27001 etc. and SOC1/SOC2 audit reports
- Ability to answer complex risk assessments and questionnaires across all domains of IT Security
- Understanding of enterprise security systems (e.g., Firewalls, VPN, SEIM), security threats and related risks, data loss prevention, malware protection etc.
- Ability to adapt to a fast-moving IT landscape and keep pace with the latest thinking and new security technologies
- Capability to understand, analyze, and interpret legal, contractual language, and summarize findings in concise, articulate manner
- Ability to be discrete and maintain confidentiality with respect to agreement contents and other highly sensitive business matters and projects

Skill Set:

- Audit and compliance
- Cybersecurity, Information security
- Data privacy, GDPR, Privacy laws
- Documentation management
- Risk assessment, Gap analysis
- Microsoft office proficiency

Location

The position is based at Egon Zehnder s KCI office in Gurgaon, Plot no. 29, Institutional Area Sector 32.

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Data Security & Protection Analyst - Digital IT (Gurugram)
🏢 Egon Zehnder
📍 Gurugram