GRC Compliance

Dear Candidates,

Greetings of the day...!!!!!!

We are hiring for GRC Compliance role and it is a Permanent Opportunity. Please find the below Job Description for the role

Please find the below-- JD.

Audit and Compliance Participation

• Internal and External Audits: Participate in internal and external audits (ISMS, IT, Finance, PCI DSS, etc.), including the gathering of audit documentation, data, and evidence.
• Audit Follow-up: Follow up on recurring or new risks, issues, and irregularities discovered during audits and identify opportunities for improvement (OFIs).

Security Control Alignment

• Security Control Review: Establish that the Client's security controls align with the defined policies, standards, and procedures to maintain the security of information systems and data.
• Gap Analysis: Perform gap analysis to compare the Cliient's current security practices with compliance standards, identifying areas of non-compliance and suggesting improvements.

Security and Compliance Frameworks

• Framework Review: Assist the Client in reviewing existing compliance frameworks (e.g., NIST, ISO 27001, GDPR, etc.) and ensure compliance with regulatory requirements and best practices.
• Compliance Audits: Conduct internal compliance audits to ensure adherence to security standards and frameworks.

Vulnerability and Patch Management

• Vulnerability Scanning: Ensure all assets are thoroughly scanned for vulnerabilities, both vendor-supported and non-vendor-supported assets. Review scan results for remediation tracking.
• Patch Management: Identify assets that need to be patched, monitor patch releases, and ensure timely application of patches without disrupting critical systems.
• Hardening & Configuration: Review and develop security baselines for asset hardening based on industry best practices.

Audit Findings and Remediation

• Remediation Tracking: Track the remediation of security audit findings, vulnerabilities, and issues until resolution, ensuring timely closure.
• Security Audits Reporting: Generate monthly/quarterly audit reports that detail remediation progress and security findings.