Hi,
n
nExp: 3+ Years
n
nOne of the certifications is mandatory.
n
n
n
- ISO/IEC 27001:2022 Lead Auditor
n
- ISO 22301 Lead Auditor
n
- Certified Information Systems Auditor (CISA)
n
n
n
n
- 3 years of relevant experience in cybersecurity GRC consulting, information security consulting, IT audit, risk advisory, compliance, or related roles.
n
- Perform ISO/IEC 27001:2022 ISMS gap assessments, internal audits, implementation support, risk assessments, control reviews, and certification-readiness activities.
n
- Support business continuity and resilience engagements aligned with ISO 22301, including BCMS documentation, business impact analysis, risk assessment, continuity planning, and exercise support.
n
- Conduct cybersecurity posture assessments, maturity assessments, control effectiveness reviews, and compliance gap assessments.
n
- Assess client environments against relevant frameworks and standards, including:
n
- ISO/IEC 27001:2022
n
- NIST Cybersecurity Framework and related NIST guidance
n
- SOC 2 Type II requirements
n
- Data Protection and Digital Personal Data Protection Act, 2023 (DPDPA) requirements
n
- General Data Protection Regulation (GDPR)
n
- Data privacy principles, privacy governance, and privacy-by-design requirements
n
- RBI cybersecurity, IT governance, outsourcing, digital-payment, and related regulatory requirements
n
- SEBI cybersecurity and cyber-resilience requirements
n
- IRDAI cybersecurity, information security, and related regulatory requirements
n
- Lead or support cyber risk management activities, including risk identification, control mapping, risk scoring, treatment planning, risk-register maintenance, and management reporting.
n
- Conduct Third-Party Risk Management (TPRM) assessments, including vendor due diligence, cybersecurity questionnaires, risk evaluation, contractual security requirements, and remediation tracking.
n
n
nIf interested, please share resume at
[email protected]
📌 Opening for Business Continuity Manager @ Mumbai
🏢 Quess IT Solutions
📍 Mumbai