About the role

Location – Noida

Years of Experience - 6-10 Years

Education - Graduate (Computer Science, Information Security, or related field).

Support and drive activities pertaining to InfoSec – Audit, Assurance & Compliance. Support for Internal, external & Client audit.
Responsible for Internal, external & Client audit. Maintain certifications like ISO 27001 , PCIDSS , HITRUST , SOC . Ensure timely closure of audit gaps. Responsible for conducting a proactive assurance assessment for GT and ISG.
Activities pertaining to InfoSec – Audit Assurance & Governance function (including but not limited to):
- Regular reviews of Policy, Process reviews basis cyber security best practices & standards
- Pro-active regular assessment of cyber technology capabilities (including tools & technologies)
- Security assurance on new and existing applications (On prem applications and Cloud – SaaS, PaaS etc.)
- Prepare and publish regular dashboards, management assurance reports, KPIs, automations and simplification of processes
- Improve efficiency of GRC implementations
- Incident Response & Forensic Investigation Readiness
- Managing internal and external reporting as well as various functional dashboards
- Stakeholder management to ensure timely availability of required inputs
- Tracking and reporting of sub functional planned activities to higher management
Project Management of InfoSec initiatives
Management of information security risks

Good understanding of Information Security and Compliance, Risk Frameworks
Knowledge of current best practice management tools and techniques
Strong stakeholder management skills
Basic knowledge of Networking, Systems, Voice and business applications
An industry recognized certification like LA27001 , CEH , CISSP , PCIDSS , CISA / CISM is an added advantage

Strong domain understanding of IT outsourced business model
Capable of managing project tasks individually and as a team
Ability to document and explain technical details in a concise & understandable manner
Ability to interface and communicate at all levels within EXL and Client organizations
Understanding of Enterprise Business Processes, IT Process, Compliance frameworks is vital
Knowledge of auditing standards

Good presentation and interpersonal skills
Excellent problem-solving skills in a cross functional environment
Strong verbal and written communication skills
Strong customer service orientation ability to connect with global customers and work with Global teams
Good listening and consultative skills
Stakeholder management, collaboration, Team work, Project Management, Risk Management, Compliance assurance

Infosec Audit and Compliance

About the role