About Job CTC Undisclosed Job Location Mumbai Experience 10 - 15 yrs Description Responsibilities & Duties Leading the function in support of 3rd party information security risk management and assessments Managing the full lifecycle of third-party assessments and meeting mandatory requirements across standards Leading the implementation of capability to enable understanding of external information security posture for key suppliers in correlation of services we consume Leading information security 3rd party risk management processes in alignment to established practices Maintain overall assessment process and improvements Manage team of 3rd party information security assessors; run regular sessions with your team to quality review third parties security risk and ensure appropriate processes followed to gain remediation plans Ensure full review of security gaps, risk and potential exposures are identified Manage escalations of third parties risk for acceptance and/or decisions Create consistent and accurate data reporting to identify trends and emerging risks across third parties and business segments Develop strong relationships with key influencers across business, technology and third parties Drive recommendation for updates to the third party standard and controls Support development of change activities and programs to be planned to close security gaps Manage any regulatory, audit and other mandatory requirements pertaining to supplier information security Education Qualification

Degree in a relevant Business or Information Technology area

Experience Band

10-15 yrs.

Technical Skills: Need to have

| Skill | Proficiency | |-----------------------------------------------------|-------------| | Third Party information security risk management | Advance | | ITGC Controls | Advance | | Contract reviews | Intermediate | | Supplier information security assessment | Advance | | IS Governance and Compliance | Advance |

Nice to have

| Skill | Proficiency | |-----------------------------------------------------|-------------| | Information Security specific qualification (such as CISM, CISSP) | Advance | | Security and Privacy regulations | Advance | | Security Operations Technical | Intermediate | | SOC2 reports and other security assessment report reviews | Intermediate |

Locations

Mumbai, Maharashtra, India