Noida, Uttar Pradesh

Job Summary

Security L2/L3 Skills and Experience - Security professional with at least 7-8 years of progressive, responsible, and diversified experience in Information security consulting, Third-Party risk management and auditing - Must have Bachelor’s degree in computer science, information systems or equivalent - Certified in industry accepted certifications such as CISA, CISM, CISSP, CRISC - GRC professional with good understanding of industry frameworks and standards - In-depth understanding of review process of current system security measure by performing security assessments to identify security gaps - Knowledgeable in various regulations like SOX, HIPPA, GDPR, GLBA, FISMA and standards like PCI DSS, SOC (service organization’s controls),



ISO 31000 - In-depth experience on Third-Party Risk Management - Evaluating third party's cybersecurity control and ensuring they comply with organizations standards and industry best practices - Track and monitor the status of each due diligence review and communicate the status with management and key stakeholders on a regular basis - Articulate risks and potential options for remediation or compensating controls - Understand inherent risk assessment - Perform current and recurring third party security risk assessments, develop mitigation plans, and work with internal stakeholders to assign remediation-tracking responsibility - In-depth understand of GDPR, LGPD and other privacy requirements - Strong business and communication skills - Experience in driving meetings with stakeholders - Provide advisory and consulting to client on new trends and challenges in enterprise risk management - Experience in design and development of information security policies, standards, and guidelines - Experience on SIG (shared assessments), ISO 27001, NIST framework, SOC 1, SOC2, ISO 27001 and HIPAA - Has sound experience around implementation of security controls, risk assessment framework, and program that align to reg

📌 Track Lead (Noida)
🏢 HCLTech
📍 Noida