- Governance, Risk and Compliance (GRC) – Risk & Compliance SME
Key Responsibilities
Job Responsibilities
- Performing independent Assessment & recommend mitigation strategies on client’s Governance Risk & compliance environments like ITGC, GDPR, German Data protection Act etc.
- Participates in process and control documentation pertaining to controls implementation.
- Participates in regulatory audits (process and IT) and management reporting.
- Facilitates IT governance implementation.
- Research and Development in best practices around core business processes, IT security.
- Develop service offerings for various industry regulatory and compliance requirements.
- Development and implementation of operational and enterprise risk frameworks.
- Liaise on with Client counterparts for compliance reporting & continually enhancing the risk & compliance framework implemented for the project.
- Drive & participate in different Risk, Compliance & Audit program and support all external/internal compliance assessment • Drive/assist closure of audit non-conformities • Monitor compliance with various contractual IT security requirements, customer policies/procedures • Ensure relevant data privacy controls were deployed and GDPR requirements are monitored • Point of contact for reporting & investigation of any relevant data breach • Perform assessment to ensure that data privacy requirements were met • Perform Delivery Center Assessment and submit report with mitigation/management response
Skill Requirements
Skill Requirement
- Performing independent Assessment & recommend mitigation strategies on client’s Governance Risk & compliance environments like ITGC, GDPR, German Data protection Act etc.
- Participates in process and control documentation pertaining to controls implementation.
- Participates in regulatory audits (process and IT) and management reporting.
- Facilitates IT governance implementation.
- Research and Development in best practices around core business processes, IT security.
- Develop service offerings for various industry regulatory and compliance requirements.
- Development and implementation of operational and enterprise risk frameworks.
- Liaise on with Client counterparts for compliance reporting & continually enhancing the risk & compliance framework implemented for the project.
- Drive & participate in different Risk, Compliance & Audit program and support all external/internal compliance assessment • Drive/assist closure of audit non-conformities • Monitor compliance with various contractual IT security requirements, customer policies/procedures • Ensure relevant data privacy controls were deployed and GDPR requirements are monitored • Point of contact for reporting & investigation of any relevant data breach • Perform assessment to ensure that data privacy requirements were met • Perform Delivery Center Assessment and submit report with mitigation/management response
Must Have Skill
Business Continuity,Disaster Recovery
Positive to Have Skill
Other Requirements
Other Requirement
- B.E/B.Tech CISA/ CISM/CISSP certification, ISO 27001 (Lead Auditor) preferred