Key Responsibilities:
- Implementation and governance of the information security policies
- Preparing and reviewing InfoSec & IT policy & process documents
- Assisting in internal & external IT/Infosec audits (e.g. ISO 27001, PCIDSS, SOC reports etc.)
- Preparing audit checklists and performing audits
- Conducting Internal Security Risk Assessment. Providing mitigation plan for the identified risk
- InfoSec exceptions management
Qualifications & Experience:
- Experience of working in InfoSec/Compliance team & managing client/internal/external audits
- Experience of audit/implementation of ISO 27001/PCIDSS etc
- Knowledge in Infrastructure scan tools of Vulnerability and Patch Management
- Experience of audit/implementation of ISO 27001/PCIDSS etc. (preferred)