Risk and compliance Lead

Professional / Technical Roles and Responsibilities:

• Information Security Management
• Responsible for company's Information security policy and standards implementation in ASPL. Draft, implement and oversee localized ASPL security policies and standards. Ensure policies and procedures are reviewed and updated regularly.
• Responsible for implementation of ISO 27001:2013 standards including asset listing, risk assessments, controls implementation, testing and monitoring. Lead internal audits as required. Minimum one ISO 27001 certification full lifecycle experience.
• Implement and test Information security controls as required.
• Promote and monitor organization wide IS Security awareness program.
• Exposure to Archer GRC tool is a plus.
• Directly responsible for procedures and controls to assure compliance with applicable regulatory and legal requirements as well as good business practices / industry standards.
• Compliance to company and ASPL internal policy and procedure requirements
• Performing root cause analyses on identified risk events to recommend improvements to prevent these risk events from re-occurring in future
• Monitoring the implementation of action plans to address medium and red key risk indicators reported monthly to Risk Management and local leadership.
• Assisting the Manager in preparing reports to the Risk Forum, Management Team and Board meetings, Risk and Compliance Committees

• 5 to 7 years of progressive Business continuity planning and Information Security management work experience. Data Privacy and Cybersecurity awareness will be a plus.
• IT / BPO / ITeS industry work experience preferred. BFSI domain