Senior Manager – Data Privacy & Cyber Security-CPG051721

About this role

• Develop and maintain critical documentation required for ongoing assessment of privacy risks, including Data Inventories, Business Information Flow Maps, etc
• Assist in identifying and assessing privacy risks, collaborate with business stakeholders in designing and implementing action plans to mitigate privacy risks
• Develop and Review policies, processes and automation required for performing Data Privacy Impact Assessments (DPIAs) on Business Partners and Vendors
• Knowledge of privacy trends and emerging regulatory compliance requirements in the field of Data privacy including but not limited to GDPR, PDPA standards or equivalent
• Strong knowledge of DLP Domain and Data Discovery Solutions such as OneTrust , Google DLP etc ,
• Lead the enterprise-wide implementation and management of security standards, including ISO 27001, NIST 800-53 CSF, and PCI DSS , and conduct comprehensive compliance framework assessments.
• Perform infrastructure and cloud security controls assessments, ensuring adherence to established security protocols and compliance requirements.
• Manage information security risk and incident management processes, including risk assessments, incident response, and mitigation strategies.
• Design and implement layered defence control protection measures against various security threats and network attack vectors, such as DDoS attacks, application attacks, and social engineering.
• Conduct cyber security assessments of Security/Information Assurance (IA) products, including Firewall, Proxy, NAC, DLP, IDAM, VPN, etc., to ensure their effectiveness in mitigating security risks.
• Experience with security monitoring tools like SIEM (Security Information and Event Management), IDS/IPS (Intrusion Detection Systems/Intrusion Prevention Systems), and vulnerability assessment tools proficiently to detect and respond to security incidents.
• Provide security guidance and support for IT projects, including system upgrades, migrations, and new deployments, to ensure that security measures are integrated into all aspects of project planning and execution.
• Develop and manage Business Continuity and Disaster Recovery (BCDR) or Business Continuity Management Systems (BCMS)
• Good understanding of ITGC and application control framework around ERPs, Databases, and Operating Systems
• Ability to independently execute IT SOX and IT Advisory audit assignments
• Provide IT advisory services to enhance security postures and data privacy.
• Collaborate with cross-functional teams to integrate cybersecurity and data privacy measures into all aspects of the business.
  
  

• B.E., B. TECH , M. TECH , MCA (Preferred) / MBA
  
  

• Experience in the areas of Data Privacy, Cyber Security, Information Security Pre/Post Implementation Assessments, are preferred
• Certifications: CIPP, CIPM, CIPT, CDPSE, CISM , CISSP