Major Responsibilities:
- Provide leadership on governance, risk and compliance w.r.t. Security and Data Privacy.
- Performing Risk Assessments & Cyber Security Reviews.
- Conduct the Compliance Assessment as per PCI DSS, ISO 27001, 27701, HIPAA, GDPR, SOC
Assessment, Cyber Security Guidelines etc.
- Knowledge of Security Operations Centre and Incident Management.
- Conduct the Information System Audit, analyze the controls effectiveness, Identify the control
deficiencies, Prepare the Audit Report, Executive Summary Presentation etc.
- Business Continuity and Disaster Recovery Planning like Business Impact Analysis, RTO/RPO etc.
Training and Awareness for Information Security/Cyber Security/Compliance Guidelines/BCP
DR etc.
- Good Communications oral and written with all the stakeholders.
Additional Responsibilities:
- Compliance Auditor is responsible for establishing standards and implementing procedures to
ensure that the compliance programs throughout the organization are effective and efficient in
identifying, preventing, detecting, and correcting noncompliance.
- Prepares for audit by researching materials, formulating a plan of action. Ensures compliance with
regulations and controls by examining and analyzing records, reports, operating practices, and
documentation; recommending opportunities to strengthen the internal control structure