Responsibiliti

<ul>
<li style="margin-left:1.6rem;">esImplements security controls, risk assessment framework, and program that align to regulatory requirements, ensuring documented and sustainable compliance that aligns and advances business objective</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">s.Evaluates risks and develops security standards, procedures, and controls to manage risks. Improves Zepto’s security positioning through process improvement, policy, automation, and the continuous evolution of capabilitie</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">s.Implements processes, such as GRC (governance, risk and compliance), to automate and continuously monitor information security controls, exceptions, risks, testing. Develops reporting metrics, dashboards, and evidence artifact</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">s.Defines and documents business process responsibilities and ownership of the controls in the GRC tool. Schedules regular assessments and testing of effectiveness and efficiency of controls and creates GRC report</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">s.Updates security controls and provides support to all stakeholders on security controls covering internal assessments, regulations, protecting PII and adherence to ISO 27001, CIS and NIST framework</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">s.Performs and investigates internal and external information security risk and exceptions assessments. Assess incidents, vulnerability management, scans, patching status, secure baselines, penetration test result, phishing, and social engineering tests and attack</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">s.Documents and reports control failures and gaps to stakeholders. Provides remediation guidance and prepares management reports to track remediation activitie</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">s.Assists other staff in the management and oversight of security program function</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">s.Trains, guides, and acts as a resource on security assessment functions to other department</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">s.Remains current on best practices and technological advancements and acts as the technical resource for security assessment and regulatory complianc</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">e.Performs other related duties as assigned.</li>
</ul>
 Knowledge 

<ul>
<li style="margin-left:1.6rem;">of:Applicable information security management, governance, and compliance principles, practices, laws, rules and regulatio</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">ns;Information technology systems and processes, network infrastructure, data architecture, data processes, and protoco</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">ls;Cyber and cloud security standard frameworks, architecture, design, operations, controls, technology, solutions, and service orchestrati</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">on;Information systems auditing, monitoring, controlling, and assessment proce</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">ss;Incident response manageme</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">nt;Risk assessment and management methodology.</li>
</ul>
 Skills

<ul>
<li style="margin-left:1.6rem;"> in:5+ Years of experience in developing and implementing enterprise governance, risk, and compliance strategy and soluti</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">ons;Researching and locating information related to internal and external organizations using online and other sour</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">ces;Security project management and plann</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">ing;Maintaining confidential</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">ity;Defining problems, collecting and analyzing data, establishing facts and drawing valid conclusi</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">ons;Using judgment and ingenuity in maintaining objectives and technical standards;</li>
</ul>
 Abilit

<ul>
<li style="margin-left:1.6rem;">y to:Effectively communicate technical issues to diverse audiences, both in writing and verb</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">ally;Apply a risk-based approach to planning, executing, and reporting on audit engagements and auditing pro</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">cess;Evaluate and update and/or revise program mater</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">ials;Learn quickly and apply knowledge to new situat</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">ions;Handle sensitive and confidential matters, situations, and </li>
</ul>

<ul>
<li style="margin-left:1.6rem;">data;Comprehend technical language and to confer, analyze and write in an objective, lucid ma</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">nner;Work independently and prioritize multiple tasks and adapt to needed cha</li>
</ul>

<ul>
<li style="margin-left:1.6rem;">nges;Remain calm under high pressure/difficult situat</li>
</ul>

Compliance Manager

Job Details & Overview

Skills Required for Compliance Manager

Job Description for Compliance Manager