Associate Consultant

Support and drive activities pertaining to InfoSec � Audit, Assurance & compliance. Support for Internal, external & Client audit.

Primary Responsibilities:

• Activities pertaining to InfoSec – Audit Assurance- First Line Compliance (including but not limited to):
• Regular reviews of Policy, Process reviews basis cyber security best practices & standards
• Pro-active regular assessment of cyber technology capabilities (including tools & technologies)
• Security assurance on new and existing applications (On prem applications and Cloud – SaaS, PaaS etc.)
• Prepare and publish regular dashboards, management assurance reports, KPIs, automations and simplification of processes
• Managing internal and external reporting as well as various functional dashboards
• Stakeholder management to ensure timely availability of required inputs
• Tracking and reporting of sub functional planned activities to higher management

Technical Skills:

• Good understanding of Information Security and Compliance, Risk Frameworks 
• Knowledge of current best practice management tools and techniques
• Strong stakeholder management skills
• Basic knowledge of Networking, Systems, Voice and business applications
• An industry recognized certification like LA27001, CEH, CISSP, PCIDSS, CISA / CISM is an added advantage

Process Specific Skills:

• Strong domain understanding of IT outsourced business model
• Capable of managing project tasks individually and as a team
• Ability to document and explain technical details in a concise & understandable manner
• Ability to interface and communicate at all levels within EXL and Client organizations
• Understanding of Enterprise Business Processes, IT Process, Compliance frameworks is vital
• Knowledge of auditing standards

Soft skills:

• Good presentation and interpersonal skills.
• Excellent problem-solving skills in a cross functional environment
• Strong verbal and written communication skills
• Strong customer service orientation ability to connect with global customers and work with Global teams
• Good listening and consultative skills

Support in maintain certifications like ISO 27001, PCIDSS, HITRUST, SOC. Ensure timely closure of audit Gaps. Proactively identify security Risk and prepare a mitigation plan and track till closure.

Bachelor Degree (Computer Science, Information Security, or related field). 8 - 10 Years