Support information security compliance programs focused on ISO 27001, SOC 1, and SOC 2. Develop and maintain security policies, conduct risk assessments and gap analyses using ISO 27001 and NIST CSF controls, prepare audit and customer RFI documentation, track remediation, report compliance metrics, and perform third-party vendor risk assessments.
Job Description:
- Support the implementation,
maintenance, and continuous improvement of information security compliance
programs, specifically focusing on
ISO 27001, SOC 1 and SOC 2.
- Develop, review, and update security policies,
procedures, and guidelines to align with relevant compliance frameworks
and regulatory requirements.
- Conduct risk assessments and gap analyses
against ISO 27001 and NIST CSF controls to identify areas for
improvement and ensure audit readiness.
- Prepare and compile documentation, evidence, and responses
for customer RFIs and audit requests efficiently and accurately.
- Contribute in identification, assessment, and mitigation of
information security risks in accordance with established risk management
frameworks.
- Maintain comprehensive documentation of security
controls, compliance activities, and remediation plans.
- Prepare regular reports on compliance status,
key metrics, and areas of concern for management and stakeholders.
- Perform comprehensive third-party risk
assessments to evaluate vendor compliance with information security
policies.
- Ensure effective communication and documentation
of third-party risk assessments.
Similar Jobs
Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Manages end-to-end resolution of regulatory, management, nodal officer, and online grievance escalations. Analyzes complex and repeat complaints, performs root-cause analysis, ensures policy compliance and timely resolution, monitors turnaround times and quality, maintains escalation records, and guides BPO and cross-functional teams. The role also drives process improvements, consumer satisfaction, team cross-training, and effective handling of exceptional cases.
Financial Services
Lead complex technology projects and programs from planning through delivery. Responsibilities include defining requirements, allocating resources, managing timelines and risks, coordinating software, QA, and business stakeholders, monitoring progress, and communicating status. The role also promotes validated AI-assisted project governance, requires strong technical fluency across AWS, MQ, Kubernetes, resiliency, and application architecture, and applies Agile methodologies and JIRA for delivery tracking.
Top Skills:
AgileAi-Assisted Project ManagementAuto-ScalingAWSDisaster RecoveryExcelJIRAKanbanKubernetesLoad BalancingMicroservicesMS OfficeMqPowerPointScrumSlasSlisSlos
Financial Services
Lead strategy, roadmap, and delivery for Securities Services data and AI products. Partner with engineering, operations, business, and clients to develop scalable data pipelines, AI/ML solutions, data lake capabilities, RAG applications, and analytics platforms. Oversee data quality, lineage, metadata, stakeholder requirements, product delivery, and continuous improvement while providing technical leadership across global teams.
Top Skills:
Ai/MlSparkAWSData LakesData LineageData PipelinesDatabricksETLHadoopMetadata ManagementAzurePrompt EngineeringRag
What you need to know about the Bengaluru Tech Scene
Dubbed the "Silicon Valley of India," Bengaluru has emerged as the nation's leading hub for information technology and a go-to destination for startups. Home to tech giants like ISRO, Infosys, Wipro and HAL, the city attracts and cultivates a rich pool of tech talent, supported by numerous educational and research institutions including the Indian Institute of Science, Bangalore Institute of Technology, and the International Institute of Information Technology.
