Senior InfoSec GRC Specialist
New
V
VelseraInformation security
Pune, Maharashtra, IndiaFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- Minimum of 8+ years of progressive experience in Information Security GRC
- Required Skills
- AWSGCPAzureRisk Management
Requirements
- Minimum of 8+ years of progressive experience in Information Security GRC, focused on risk management, compliance, and governance.
- Hands-on experience driving and maintaining ISO 27001 certification programs.
- Practical experience implementing security controls in a technical, cloud-centric environment.
- Technical competency in cloud security and cloud-native security services for AWS, Azure, or GCP.
- Hands-on experience with NIST 800-53 compliance frameworks.
- Bachelor's degree in IT, Computer Science, or a related field.
- One or more of the following certifications are highly preferred: CISSP, CISA, ISO 27001 Lead Implementer/Auditor, CCSK, or an equivalent cloud-specific security certification.
- Strong project management and organizational skills to handle multiple audit and compliance initiatives.
- Ability to communicate security and compliance requirements and controls as clear, actionable guidance.
- Ability to collaborate with and influence cross-functional teams.
Responsibilities
- Develop, implement, and maintain information security policies, standards, and procedures aligned with ISO 27001.
- Lead and mature the Information Security Management System, including risk treatment, internal audits, and external certification audit readiness.
- Conduct continuous monitoring and collect evidence for compliance with relevant frameworks.
- Plan and manage internal and supplier audits and prioritize GRC activities.
- Perform security risk assessments and gap analyses on new and existing systems, with a focus on cloud infrastructure.
- Collaborate with Product, Technology, IT, and Security teams to implement cloud and infrastructure security controls and provide technical guidance.
- Review risk mitigations and track remediation efforts to closure.
- Conduct third-party vendor risk assessments against required compliance standards.
- Develop and deliver security awareness and training focused on HIPAA and ISO 27001 requirements.
- Evaluate security technologies and processes and monitor cloud security threats, regulatory changes, and ISO 27001 updates.
View Full Description & ApplyYou'll be redirected to the employer's site
