Senior Consultant- Cybersecurity

<h2>Key Responsibilities :</h2><ul>
<li>Candidate should have Bachelor's degree in Computer Engineering with 10 -15+ years of relevant experience in Cyber Security.</li>
<li>Supports defining, enhancing, evolving, and demonstrating company’s point of view and delivery approach of cybersecurity-focused services.</li>
<li>Should have experience handling Issue and Exception handling process and Risk management.</li>
<li>Builds and maintains client relationships, developing a strategic vision for clients and internal teams.</li>
<li>Candidate should have played GRC role for ISO27k, PCI DSS.</li>
<li>Perform review of RCSA (Risk Control Self-Assessment) to ensure controls are designed and operating effectively</li>
<li>Maintain Technology Policies, Standards and Control Library. Technology policies and standards are in alignment with Customer’s adopted industry practices and standards (I.e. ISO, NIST, CSA,)</li>
<li>Lead customer audit engagement (internal and external) and oversight on all IT audit matters</li>
<li>Conduct reviews to ensure systems and processes comply with existing technology policies and standards</li>
<li>Hands on experience in Operational Security Reviews Audits and Security Incident Management review.</li>
<li>To support Compliance Scanning, Management and Reporting.</li>
<li>To support Security audit and assessment activities (e.g., data collection, supporting evidence and report generation) and review the third-party support report.</li>
<li>Effectively communication risks and system issues to all the stakeholders ahead in time to avoid any program risks/escalation.</li>
<li>Directly responsible for procedures and controls to assure compliance with applicable regulatory and legal requirements as well as good business practices.</li>
<li>Help ensure compliance with ISO27k, PCI and the NC Identity Theft law.</li>
<li>Liaise with Internal &amp; external Audit, Corporate Compliance and Risk.</li>
<li>Ensure policies are reviewed and updated regularly.</li>
<li>Promote and monitor the IS Security awareness program.</li>
<li>Maintain expertise on security trends through training, research, and development in order to mitigate potential security exposures.</li>
<li>Professional certification such as CISA, CISM, CRISC, or CISSP is desirable.</li>
<li>Good understanding of financial domain and Security IT.</li>
</ul><h2>Requirements</h2><ul>
<li>Candidate should have Bachelor's degree in Computer Engineering with 10 -15+ years of relevant experience in Cyber Security.</li>
<li>Supports defining, enhancing, evolving, and demonstrating company’s point of view and delivery approach of cybersecurity-focused services.</li>
<li>Should have experience handling Issue and Exception handling process and Risk management.</li>
<li>Builds and maintains client relationships, developing a strategic vision for clients and internal teams</li>
<li>Perform review of RCSA (Risk Control Self-Assessment) to ensure controls are designed and operating effectively</li>
<li>Maintain Technology Policies, Standards and Control Library. Technology policies and standards are in alignment with Customer’s adopted industry practices and standards (I.e. ISO, NIST, CSA,)</li>
<li>Lead customer audit engagement (internal and external) and oversight on all IT audit matters</li>
<li>Conduct reviews to ensure systems and processes comply with existing technology policies and standards</li>
</ul><h2>Domain Skills</h2><h2>CISA, CISM, CRISC, or CISSP</h2><h2>Certification</h2><h2>Mandatory ☐</h2><h2>Good to have ☒</h2><h2>Detailed Job Description</h2><ul>
<li>Candidate should have Bachelor's degree in Computer Engineering with 10 -15+ years of relevant experience in Cyber Security.</li>
<li>Supports defining, enhancing, evolving, and demonstrating company’s point of view and delivery approach of cybersecurity-focused services.</li>
<li>Should have experience handling Issue and Exception handling process and Risk management.</li>
<li>Builds and maintains client relationships, developing a strategic vision for clients and internal teams</li>
<li>Perform review of RCSA (Risk Control Self-Assessment) to ensure controls are designed and operating effectively</li>
<li>Maintain Technology Policies, Standards and Control Library. Technology policies and standards are in alignment with Customer’s adopted industry practices and standards (I.e. ISO, NIST, CSA,)</li>
<li>Lead customer audit engagement (internal and external) and oversight on all IT audit matters</li>
<li>Conduct reviews to ensure systems and processes comply with existing technology policies and standards</li>
<li>Strong familiarity with industry frameworks such as ISO standards, GDPR, NIST, PCI DSS, CISO. Broad understanding of cyber security concepts and risks.</li>
</ul><h2>Industry and Technology certifications – CISA, CISM, CRISC, or CISSP</h2>