13 Aug
|
Allied Boston Consultants India
|
Mumbai
13 Aug
Allied Boston Consultants India
Mumbai
*Key Responsibilities:*
1. Evaluate the information security governance, risk, and compliance posture of client organizations against leading frameworks and standards, including ISO/IEC 27001:2022, ISO/IEC 27701:2019, ISO/IEC 22301:2019, ISO 31000:2018, NIST Cybersecurity Framework 2.0, NIST SP 800-53 / 800-171, COBIT 2019, PCI DSS v4.0.1, CIS Controls v8, & CSA CCM.
2. Assess client compliance with applicable Indian regulatory guidelines and frameworks, including:
- RBI master directions for banks & payment aggregators
- SEBI - Cybersecurity and Cyber Resilience Framework (CSCRF) for Regulated Entities.
- IRDAI - Information & Cyber Security Guidelines for the Insurance sector.
- UIDAI - AUA/KUA, Sub-AUA, and ASA requirements, and Information Security policies.
- CERT-In - Cyber Security Directions dated 28 April 2022 and CERT-In empanelment audit guidelines.
- NCIIPC - guidelines for the protection of Critical Information Infrastructure (CII).
- MeitY, DOT, CEA, NPCI, NSE/BSE, and other sectoral regulator guidelines, as applicable.
3.
Conduct risk assessments and control testing across people, process, and technology domains; identify gaps; assess inherent vs. residual risks; and recommend risk treatment plans.
4. Review application security, IT infrastructure security, cloud security, and network security architectures as part of GRC assessments.
5. Perform third-party / vendor risk assessments and supply-chain security reviews.
6. Plan and execute compliance activities, including drafting and reviewing information security policies, procedures, standards, and process documents.
7. Support clients during regulatory inspections and external audits by responding to queries, providing evidence, and coordinating with auditors and regulators.
8.Stay current with evolving cybersecurity regulations, advisories, and threat landscape; track changes from CERT-In, RBI, SEBI, IRDAI, MeitY, NCIIPC, and other regulators, and adapt audit/compliance approaches accordingly
📌 Sr. Security Auditor (Mumbai)
🏢 Allied Boston Consultants India
📍 Mumbai