This job ad has been posted over 30 days ago...



ITRA Associate & Senior Associate professionals Full-time

at PwC in Gurgaon (Published at 30-11-2018)

Experience : 3- 10 years

• Good understanding of, and experience with Information Risk Management, Review (internal and external), and Business (IT) Controls.
• Advanced understanding of internal and external IT security standards, PCI standards and relevant legal compliance aspects.
• Robust understanding of, and solid experiences with the impact of IRM on application development and operations as well as the IT Infrastructure.
• Understand the Risk assessment, Business Impact assessment and Data privacy assessment cycles and process
• Must be hands-on with conducting carrying out security controls validations and testing
• Ability to interface with different groups (Third parties, Business and IT) internal and external to IT (security) and to network globally across Group businesses, as well as with external groups.
• Technical knowledge & relevant experience in security domains /technologies related to: :
o Infrastructure/Network security
o Identity and Access Management
o Business Impact Assessment
o Application security
o Data Leakage Prevention
o End Point Protection
o Web filtering technologies, Proxies and firewalls.
o Vulnerability Assessment / Penetration Testing
o Cloud security
• Knowledge of Data Security Standards: PCI DSS , Privacy Principles
• Driving Platform / Application security and compliance as part of Project Engagement
• Ability to foresee and identify mitigation strategies for Risks Candidate must also:
o Display excellent communicating and influencing skills
o Display analytical and problem solving skills
o Be pro-active and self-motivated
o Display strong interpersonal and negotiating skills with all levels of staff.
o Display Ability and eagerness to quickly learn new technologies.

Risk, Process and Framework knowledge will cover areas, such as:
1. Risk Assessments
2. ISMS Framework Implementations
3. Creation, Review and Update of Information Security Policies, Procedures, Guidelines etc.
4. Knowledge of frameworks / best practices such as NIST, ISO 27001, CoBIT, ITIL and ISO 22301
5. Cyber Security Maturity Assessments
6. IT General Computer Controls

Qualification :

• Btech/BE, BCA
• Masters in Business Administration/ Masters in Software engineering/ M.Tech / Masters in Cybew Law
• A qualification in CISSP, CISA, CRISC, CISM preferred

Recent jobs at PwC

Viewed: 663 times
« Go back to category
Is this job ad fake? Report it!   
Recommend to a friend