GRC Analyst - 7-10yrs

Position: GovernanceRisk & Compliance - GRC Analyst

Job location :- Ghansoli

No of vacancy :- 2

We are seeking a skilled and vigilant L2 for handling Governance Risk and Compliance for MGS. The Ideal candidate will ensure that an organizations operations and procedures meet government and industry compliance standards with a strong focus on ISO 27001 implementation and policy preparation.

Roles & Responsibilities:

1. Risk Management: Identify, assess, and manage risks related to information security, privacy, and regulatory compliance.

2. ISO 27001 Implementation: Lead the implementation and maintenance of ISO 27001 standards, including conducting internal audits and managing certification processes.

• 3. Policy Development: Develop, update, and enforce security policies, standards, and procedures to ensure compliance with regulatory requirements.
• 4. Compliance Monitoring: Monitor and ensure adherence to industry regulations and standards, such as GDPR, NIST, and SOX.
• 5. Audits and Assessments: Conduct regular audits and risk assessments to identify gaps and recommend improvements.
• 6. Vendor Risk Management: Evaluate and manage third-party vendors to ensure they meet organizational security requirements.
• 7. Security Controls: Test and monitor the effectiveness of security controls and recommend enhancements.
• 8. Regulatory Research: Stay updated on regulatory changes and ensure the organization complies with new requirements.

Mandate Skills:-

• Good Verbal and Written communication skills.
• Good Team player.
• Possess Positive and learning attitude.
• Excellent problem-solving skills and attention to detail.
• Strong documentation skills (creation of dashboards for regular reporting)
• Relevant certifications (e.g., CISA, CISM, ISO 27001) are a plus.
• Sense of Ownership, Priorities and Autonomous.
• Good to have at least one certification (ISO 27001 LI, ISO27001 LA)
• Knowledge of banking business and information technology practices and trends in banking sector
• Ability to communicate effectively, both orally and in writing.

Qualifications:

Graduation/Post graduation in, Computers, Information Systems, Computer Science, or Information technology systems

Experience: Between 7 -10 years of work experience as GRC and relevant experience hands on of 7 years including Risk management, risk assessment, 2nd line defense in risk, control assessment, control review, control testing, ITGC Control, Gap Analysis, Creating and making policies And procedures, Information Security Officer - ISO 27001 certified, compliance auditing, cybersecurity framework - NIST,CIS

Preferred candidates from Mumbai under 20 kilometers

Interested candidate can share our updated cv in mgs.rec@mizuho-cb.com

subject :- GRC Analyst- Navi Mumbai

Address: -

Mizuho Global Services India Pvt.

• 11th Floor, Q2 Building Aurum Q Park, Gen 4/1,
• Ttc, Thane Belapur Road, MIDC Industrial Area,
• Ghansoli, Navi Mumbai- 400710.