AMS_Senior Associate_Pun

Consultancy and Support towards Security and compliance controls with respect to various Bosch/Industry regulations; Conduct compliance assessments and provide consultation on security frameworks, including ISO 27001:2022; Always be updated with any changes to the central guidelines and analysis the changes and adapt the changes process; Engage with stakeholders, including managers, application owners, and technical teams, to assess security controls and document security compliance; Conduct and consult on gap analyses for security policies, controls, and procedures; Assist in developing and maintaining Business Continuity Management Plans (BCMP); Provide guidance on security best practices, including penetration testing, vulnerability scanning, encryption, and backup/storage security; Ensure security documentation is complete, accurate, and up to date; Assist in the implementation of security standards, policies, and regulatory requirements; Follow the roadmap as aligned with customer unit in completion of Policy implementations and controls in the Applications; Prepare reports and documentation to demonstrate compliance with relevant standards; Ensure the customer KPI's, quality and deliverables are met

Responsibilities

Consultancy and Support towards Security and compliance controls with respect to various Bosch/Industry regulations; Conduct compliance assessments and provide consultation on security frameworks, including ISO 27001:2022; Always be updated with any changes to the central guidelines and analysis the changes and adapt the changes process; Engage with stakeholders, including managers, application owners, and technical teams, to assess security controls and document security compliance; Conduct and consult on gap analyses for security policies, controls, and procedures; Assist in developing and maintaining Business Continuity Management Plans (BCMP); Provide guidance on security best practices, including penetration testing, vulnerability scanning, encryption, and backup/storage security; Ensure security documentation is complete, accurate, and up to date; Assist in the implementation of security standards, policies, and regulatory requirements; Follow the roadmap as aligned with customer unit in completion of Policy implementations and controls in the Applications; Prepare reports and documentation to demonstrate compliance with relevant standards; Ensure the customer KPI's, quality and deliverables are met

Requirements

Know-how in IT systems; Experience in Application Management Processes, Governance and Policies; Knowledge of security concepts, including penetration testing, vulnerability scanning, encryption, backup and storage security, business continuity management, and application security; Overview and Experience in Information, Project, IT Security and/or IAM and GRC Processes; Good working knowledge in MS office (Excel, word and PPT). Knowhow in excel functions (E.g., Pivot table, charts, lookup functions, etc.,); Professional oral and written communication skills; Should be able to work on deliverables independently with complete ownership & proactiveness; Should be a good team player, flexible and deadline oriented; Good verbal and written communication in English; 4 to 7 years of relevant experience; Solid organizational skills especially the ability to meet project deadlines with a focus on details; Proven ability to work in a deadline-driven environment and handle multiple projects simultaneously; Knows how on finance and accounting functions, and Applications/tools for supporting these functions; Ability to understand and analyze the application landscape; Ability to learn new technologies quickly; Ability to self-manage work assignments and prioritize work activities; Professional focus on continuous improvement to seek efficiency in engagement management and gains in team proficiency; Good understanding of information security and user access frameworks in the organization; Good knowledge and experience on typical organizational structure and business/functional domains

Nice to have

Work experience with GRC tools will be an added advantage; Know-how on ITIL service management processes will be an added advantage; Any other U.G/P.G degree with relevant experience also recommended