Description:
As a member of the Information Security Risk and Compliance team, this position will assist in building and implementing programs, policies and practices to ensure that the IBEX complies with industry and regulatory requirements like PCI DSS, SOC2 Type II, SOX & ISO 27001.
This position liaise closely with internal business units to increase security awareness, assess compliance and where necessary, provide support in remediating non-compliant areas
- Develop/implement ITGC, information technology general control review
- Execute readiness assessments for SOC2 Type II, SOX and ISO 27001 compliance projects
- Work with relevant IT and business function during the various compliance projects and client security assessments
- Evaluate effectiveness of existing controls and determining the impact of proposed changes to business processes, applications and systems.
- Perform risk assessment & communicate identified security risks to appropriate parties to ensure a clear understanding of the risks as well as potential mitigations.
- Execute internal audits and assessments as per business need.
- Liaison with teams for client assessments.
- Support global cybersecurity risk & compliance function.
Job Specification:
- Bachelor’s Degree in Computer Engineering/Information Technology
- 3-5 years of work experience
- ISO 27001 LA/I
- CISA , CISM/CISSP, PCIDSS, SOC2 TypeII
- IT Security Governance
- Risk Assessment
- System, NW, Application Security gap assessment
- Must have analytical skills in order to assess information and identify potential risks and should have problem-solving skills to be able to determine how to reduce those risks.
- Excellent written and oral communication skills
- Policies & procedures development