Grc and Data Privacy

Identification of threats and risk exposures
- Assessment and management of risks
- Monitoring of the implementation of corresponding mitigating controls
- Update the risk registers periodically
- Design, implement, manage and improve quality and compliance programmes
- Manage compliance and improve business processes and operations by supporting a programme of internal audits and external assessments against adopted standards
- Perform and/or manage internal reviews of Projects and Services against the industry standards adopted
- Co-ordinate activities for fulfilling requirements of internal and external audits or assessments
- Understanding data privacy stature in client organization
- Custom make and implement privacy compliance program in client organization
- Assessing data privacy compliance
- Designing and implementing data protection and privacy programs
- Execute data discovery & privacy impact assessment manually as well as using technology platforms (ONETRUST, SECURIT.AI, BigID, TRUSTe etc.)
- Define and deploy processes to detect and prevent privacy breaches
- Execute project which involve advise, create & documentation of policies and procedures to help organizations protect their data (e.g., PII, Sensitive data, financial data etc.)
- Research and analyse new data privacy regulations evolving across the globe
- Define technical and business requirements for data privacy and information governance solutions
- Implement data privacy, information governance, IT and information security related technology products.
- Perform basic supervisory duties to mentor and coach junior staff. Develop people through effective trainings and certification guidance

**Skills Required**:

- Seven+ years of relevant experience in implementing, managing, reviewing and improving internal controls for governance, compliance and quality, IT audits, or assurance and risk management programmes
- Experience in conducting Risk Assessment, identifying treatment plans
- Experience in working with ITSM tools such as Manage Engine, BMC Remedy, Service Now
- Good experience in implementation of ISO 27001, ISO 20000, ISO 22301
- Conducting Internal audit
- Liaison with certification bodies / auditors for successful audits
- Track record of performing internal or external audits (financial/operational/IT) in accordance with relevant professional standards
- Highly proficient in audit methodologies, especially but not limited to those applicable in IT environments
- Highly skilled in designing and implementing compliance and control frameworks including business process reengineering.
- Experience in business process and control optimisation, preferably within an IT organization
- Proficient in IT governance and quality and Data Privacy standards
- Experience with implementation of privacy and data protection projects
- CIPM/CIPT, CIPP/E, CIPP/US (at least one certification preferably)
- Technology platforms (ONETRUST, SECURIT.AI, BigID, TRUSTe etc.)

**Additional skills**:

- Experience writing high quality documentation and reports
- Excellent comprehension of internal controls requirements and implications
- Demonstrated ability to work in multicultural and diverse environments

**Job Types**: Full-time, Regular / Permanent

Pay: ₹2,500,000.00 - ₹3,000,000.00 per year

**Benefits**:

- Health insurance
- Work from home

Schedule:

- Day shift
- Monday to Friday

Ability to commute/relocate:

- Bangalore, Karnataka: Reliably commute or planning to relocate before starting work (required)

Application Question(s):

- what is your total exp? (n years)
- What is your current CTC? (in lakhs per annum)
- what is your expected CTC? (in lakhs per annum)
- What is your notice period? (in days)

**Experience**:

- total work: 1 year (preferred)
- Health insurance