id: MDIxOTE5MDYwMDAyNjcgMjYx

reference: 02191906000267

documentId: 02191906000267

connectionPointId: 261

Stillingstittel:
Cognizant is looking for a strong Information Risk Manager

Stillingsbeskrivelse:

The Information Risk Management (IRM) is a global team in Cognizant that is responsible for ensuring all security risks pertaining to business delivery and client engagements are managed end to end. The team engages on a frequent basis with business leaders to identify, analyze and mitigate security risks. The team is also the primary touch point between the Corporate Security Group and Business teams, while supporting the business on client security requirements and compliance.

As a Senior Manager in IRM, you will be part of the global team, and you will facilitate security requirements and oversight for Cognizant Norway office(s), IT / AVM/ BPS Business and its clients.

Main responsibilities:

• Engage in IRM program for the key accounts: define control framework; identify and evaluate risks; understand business context and prepare reports and recommendations.
• Manage the overall risks & compliance for overall Norwegian accounts
• Coordinate with Incident management team during incidents and support investigation of security breaches.
• Perform annual Security Risk assessments and conduct related ongoing compliance monitoring activities in coordination with Privacy Officer and Legal Team members.
• Provide the Security advisory for Business team throughout the lifecycle of the accounts from Deal stage, Due diligence, Transition & Transformation, Steady state, Service Maturity until Exit stage.
• Act as a focal IRM POC for Norwegian customers and Business Units and interact with them on the basis of various security requirements
• Manage External ISO 27001 audit and coordination with auditors: plan out audit schedule and charter for corporate functions and coordinate with all internal stakeholders towards preparation.
• Assess, prepare and ensure all IT systems, policies and procedures fully comply with Cognizant ISO 27001 SoA, security laws, rules and regulations.
• Engage with different stakeholders: external auditors, customer visitor, business leaders and corporate teams, such as HR, legal, IT, etc.
• Conduct reviews to assess the service delivery control environment and evaluate adherence to client identified contractual requirements, Cognizant policies and standards.

Requirements:

• Bachelor degree in Computer Science or relevant field.
• Security certifications such as CISA, CISSP, CISM, CRISC, CCSK, CIPP IT, CIPP E etc.
• Strong knowledge on GDPR and EU Data Protection directive, PCI Security requirements, SSAE 18/ ISAE 3402, SOC2 Standards, rules and regulations.
• Proven experience in information security and risk management field, especially with Technology Risk Management / IT Audit in Enterprise organizations.
• Strong experience in understanding and deploying risk management and security frameworks such as NIST, ISF and ISO.
• Experience of SSAE/ ISAE, SOC 2 and PCI-DSS, assessment and control implementation; ISMS implementation.
• In-depth understanding of network and system security technology and practices across all major-computing areas (Network, firewalls, client/server, PC/LAN, telephony) with a special emphasis on Internet related technology.
• Understanding of DLP and eDiscovery tools as well as mapping Data Flows and processes.
• Experience on ISO 27001 Information Security Management system, Risk Assessments, Evaluation of results / findings, IT GRC Governance Risk Compliance Tools.

Personal Characteristics:

• Ability to think strategically; work with a sense of urgency and pay attention to detail.
• Ability to present complex solutions and methods to a general community.
• Independent thinking, willingness to "step outside the box" and take reasonable, calculated risks.
• Excellent written and verbal communication and organizational skills, fluency in English.
• Strong collaboration skills and willingness to be a team player to solve problems and incorporate input from various sources.

We offer:

• Opportunity to be part of a rapidly expanding global organization with irreproachable reputation.
• Open and colourful work place with multicultural community.
• Opportunity to grow both professionally and personally.
• Inspiring working atmosphere and many engaging activities.
• Clear career path and extra benefits.

Se annonse

PAM

numberOfPosts: 1

jobCategoriesCodes_0: http://data.europa.eu/esco/isco/C2511

abstractJV_contact_0: See jobabstractJV_description

contractTypeCodes_0: fulltime

Arbeidsgiver Navn: COGNIZANT TECHN SOLUTIONS NORWAY AS

source: NAV