Tech Mahindra - Enterprise Risk Management & Information Security Consultant

Job Description -

IT ERM consultant provides strategic, tactical and operational solutions around IT security and Enterprise Risk Management to the Tech Mahindra customers. And develop tools on the emerging technologies based on his or her previous experience; consultant will identify the gaps and problem area and provide solutions with minimal cost of the customers. Consultant understands various Industry domains and its dependency on the IT.

Consultant also develops whitepapers, assessment tools, new service offerings apart from conducting webinars and workshops

Knowledge Requirement : Demonstrates knowledge on the following area

- Expertise in IT technology and frameworks related to Technology, Risk Assessment, Control Testing Framework, policy framework for operational Risk & Compliance.

- Experience in functional areas such as Information Security, Regulatory Risk, Physical Security, Business Continuity, People related security policies.

- Good knowledge about Risk & Security Governance, Risk Assessment at Infrastructure level and audit.

- Compliance/Controls Framework for IT organization

- Understanding and implementation experience of risk assessment principles/ framework / methodologies.

- Expertise required in implementing Technology risk controls in an IT set up for Development & Infrastructure programs.

- Ability to communicate governance requirements effectively, to stakeholders and manage senior stakeholder meetings such as Risk board.

- Broad experience in Risk & Compliance, Risk governance, Audit, global Policy/ processes/ standards compliance with focus on technology for example, BS7799 / ISO27001/ISO 31000.

- Understanding of legal and regulatory issues affecting the organization, both locally and internationally.

- Facilitation of managers/staff on process implementation, providing training / awareness.

Experience : 5 to 10 year's Experience

Education : BE/ MTech /MCA

Certificate : CISA, CISM, ISO31000/ 22301 / 27001 Lead auditor and SOX compliance