Responsibilities :
- Plan, develop and implement org-level audit strategies with the objective of minimizing the Information security risks, achieving scalability, sustainability and improvements in information security requirements and Privacy requirements . Understanding client specific information security policies and process, plan and conduct entity level audits, vulnerabilities assessments, system audits and technical audits for mitigating risks to the organization and to the clients within norms and policies of Infosys.
- Security risk analysis; Planning & execution of audits; review reports; cross functional liaison; customer interfacing; help in standardization of processes thro’ Corrective and preventive actions of Information security risks identified.
- Create audit strategy for an account / unit level and implement org-level audit strategies, develop audit plans for conducting audits for minimizing organizational risks in order to achieve scalability, sustainability and improvements in Information security and customer satisfaction
- Perform Entity level information security , BCMS and Privacy process audits covering both security policies and contractual commitments, report noncompliance to relevant stakeholders, ensures submission corrective and preventive actions for security audit NCRs. Assess the effectiveness of closure in order to ensure Account level/unit level Information security process and client specific security requirements are compliant
- Conduct technological audits including audits on network architecture, deployed solutions (viz, DLP solutions), storage, SAM, Security risk analysis, vulnerability assessments, Penetration test and forensic analysis. Analyze audit reports and work towards improving efficiencies in audits.
- Conduct audits in the areas of information security, regulatory requirements v.i.z, GDPR, PCI-DSS, HIPAA, SOX, ITGC, SSAE 18, SOC 1, SOC 2, ISAE 3402
- Conduct in-depth audits on business continuity focus area at various levels, account level, support functional level, locational level and identify systemic issues across the areas.
Preferred Skills :
Technology->Architecture->ISO,Foundational->Information Security->Governance Risk and Compliance, Audits , Workflow
Generic Skills :
Technology->Identity Management->Identity Governance Framework, Attestation/Access Cert, Role Mgmt,Auditing,Entitlement Mgmt, XACML,Foundational->Quality & Compliance->System Validation and Sox
Educational Requirements :
Bachelor of Engineering
Service Line :
Quality