GRC – ITRO Risk & Compliance Officer

Summary of Assigned Duties:

·         Customer/ delivery mindset and very Strong Project management skills. Able to drive and meet project milestones objectives and expert in GRC domains & best practices/ governance based on – NIST, ISO 27001: 2013, SOX ITGC, Cloud Compliances, SIG etc. Expertise in Security, Risk & Compliance, Audit Management,

·         Act as trust advisor to lead and drive IT Risk & compliance office to manage the entire Audit, Compliance & Risk Management Program, Cloud controls matric (CCM), GDPR

·         Communication and Stakeholder Management skills are essential for this role, being able to cut through complex IT GRC issues and explaining those in easy Business language.

·         Key member of the GRC Program at the Client end. Expert in building a resilient GRC framework foundation and thereafter manage the GRC operations. 

·         Ensure Compliance & SLA adherence, Timely audits, Audit Support & Advisory, Manage External Audits

·         Responsible for IRM technology solutions strategy and implementation ( preferably) execution along with very strong experience in GRC Operations with leading GRC tools)

·         Exposure to MS compliance manager and strong in Policy and compliance configurations over MS environment

·         Support and oversee high level document designing (HLD/ LLD) etc

·         Conduct Solution workshops and developing functional design documents

·         Management Communication and participating in all GRC related meetings and status reporting

Functional Knowledge and Skills:

·         Mandatory – Alyne GRC /GRC implementation & Operation experience in the following functional domains:

1.       Policy & Compliance Management

2.       Risk Management

3.       Audit Management

4.       Support Cloud controls matrix (CCM), ISO27001 frameworks and controls compliance

·         Experience is any other GRC tools: Alyne GRC is mandatory and strongly desirable

·         Excellent documentation, presentation, communication, and interpersonal skills, stakeholder management and reporting

Education:

Essential:

·         University degree (Bachelors’ degree) or equivalent experience in computer science, information systems, mathematics, statistics, or related field.

Desirable

·         Any two Security Certifications among ISO 27001, CISA, CISM, CEH, CISSP, CRISC, CGEIT, CISSP, CCSK

·         GRC Security product vendor certifications in the last 3 years

·         Mandatory Alyne GRC Certifications

Experience

·         Total IT GRC experience: Over 12 yrs.

·         Relevant Alyne GRC experience: Over 3-5 years which includes technology implementation, upgrades, migration, architecting, processes.

·         Desirable skills in any scripting and coding language, tool configurations, integrations