Information Security Governance Risk & Compliance Associate or Senior Associate

Location: Bangalore India

Job Description

The role is focused on:

Contribute to the ongoing development of information security and general compliance (HR environmental etc.) systems policies and procedures through implementation maintenance and identification of gaps or non-compliance.

Assisting with the development implementation and improvement of the Morae Enterprise Governance Risk & Compliance processes.

Ensuring Morae Global policies applicable standards customer requirements and best practices are being followed.

Supporting the delivery of information security projects and initiatives like the internal external and client audits.

Represent Morae Global in a professional and productive way while delivering the best in service to our clients and during interactions with both clients and suppliers when required.

Supporting the wider information security team on providing a responsive and pragmatic approach to day-to-day security issues and broader strategic initiatives.

This is of course whilst developing your functional skills. You will gain an operational support insight into the management and on-going development of an information security management system which is supporting the delivery of services to the worlds largest institutions.

The ideal candidate will be a highly motivated self-starter with a desire to enhance own information security knowledge.

Key Responsibilities

Ensure security and compliance documents are controlled reviewed and updated in line with various contractual and regulatory requirements.

Support with information security and compliances training and awareness activities.

Deliver related security communication across the organisation as required.

Capturing evidence to support audit and compliance requirements.

Refine and maintain security dashboards and reports to support the production of security metrics and monthly reporting.

Initiate continuous improvement ideas and suggestions to increase efficiencies.

Actively participate in wider internal and external information security initiatives.

Technical Skills

Experience of the security processes associated with technology

Experience of working in a technology environment

A broad awareness of privacy and security technical controls

Experience of or demonstrable interest in implementing GRC solutions and activities based on risk assessments.

Non-Technical Skills

Familiarity with information security and compliance best practices across the breadth of the IT and information security spectrum

A good understanding of key Compliance IT and Information Security principles

A keen interest in security and an understanding of the need for the Confidentiality Integrity and Availability of information and information systems to be maintained

Strong written and oral communication skills (Business language is English).

Ability to influence at all levels through translating security issues into business language

Preferred Qualifications & Experience

Bachelors degree or equivalent with relevant work experience.

Recognised security certifications would be beneficial.

ISO/IEC 27001:2013 and/or SOC2 experience would be advantageous for the role.

Excellent English-language communication skills.