We are looking out for Information Security Professionals who have managed Supplier's Audit, Information Risk Assessment, BCP, DRP etc.
Below are the specification of the role :
Key responsibilities:
1. Information risk assessments of supplier services
2. Information security due diligence on new suppliers
3. Oversight of supplier resilience (business continuity) arrangements
4. Ongoing oversight of information risk at suppliers, including MI review and challenge and periodic assessments to ensure compliance with agreed contractual terms.
5. Advising on inclusion of appropriate information security, data protection and business continuity schedules in contracts
6. Collaboration with contract stakeholders to share knowledge and ensure common understanding of due diligence requirements
7. Delivery and maintenance of team processes, guidance, templates, trackers to enable full audit trail of activity
8. Assessment and reporting of compliance with Information Security - External Supplier Management policy
9. Planning and delivery of communication and awareness activity - internal and external
10. Staying abreast of regulatory, legislative aspects and industry best practice
Skills and Knowledge:
- Graduate in relevant subject or relevant professional qualification (e.g. CISM /CISA / CISSP / MBCI)
- Extensive (4 to 8 years) experience of information security / business continuity / risk management, ideally within a regulated environment
- Excellent understanding of information security / business continuity management governance frameworks and best practice (e.g. ISO 27000 series, ISO 22301, ISF SOGP, COBIT)
- Knowledge / experience of supplier assurance / supplier risk management
- Strong networking and stakeholder management
- Strong written and verbal communication skills
- Ability to work independently and manage multiple work items concurrently
- Ability to negotiate effectively with senior stakeholders and external suppliers under pressure
Interested candidates can apply or call Akansha at +91-9560096536
Didn’t find the job appropriate? Report this Job