Cyber Sec Eng II- Compliance, Internal/External Audits or Assessments (3-6 years of relevant experience)
FICO
Job Description
**Hybrid Mode- 3days WFO is mandatory What We’re Seeking Experience with 3 – 6 years in information security, compliance, or related roles. Strong understanding of industry-specific regulations (e.g., PCI DSS, SOC 2, CSA Star, ISO 27001). Must have participated or faced Audits/Auditors. (Any of these - PCI DSS, SOC 2, CSA Star, ISO 27001, NIST framework) Certifications - CISA , CISM, CRISC, CISSP , ISO 27001:2022, etc are good to have.
Should have worked as part of Internal and / or External Audits and assessments. (Any one mandatory) Good Understanding of enterprise environments, cloud computing and / or product security. (AWS preferred). Good Understanding of Network concepts , SDLC specific to Cloud hosted applications. Understanding of defining project scope and objectives, developing detailed work products (schedules, status reports, etc.), conducting project meetings, and owning responsibility for project tracking and analysis.
Requires sufficient technical background to be able to interpret audit and compliance requirements. Understanding on Risk Assessments and Vendor Assessments is a plus. Excellent communication and interpersonal skills and Strong analytical/ problem-solving abilities.
Detail-oriented with the ability to prioritize and manage multiple tasks effectively. What You’ll Contribute Lead the end-to-end lifecycle for all the audits - ISO27001:2022, PCI DSS, SOC 2 Type 2, NIST CSF, CSA Star level 2. Mentoring: Providing KT to the team members on new / latest standards and frameworks.
Quality Management : Ensuring the evidence are reviewed and shared with the auditor on time without any deviations. Keeping track of all the audit status and communicate to the internal stakeholders (GRC). Resource Management : Being part of resource allocation to ensure the team members have work life balance between multiple audits.
Being part of control optimization and improvements / initiatives. Design / Implement and lead control testing from compliance perspective. Contribute towards Client audit assessments (addressing RFP’s and RFI’s).
Our Offer to You An inclusive culture strongly reflecting our core values: Act Like an Owner, Delight Our Customers and Earn the Respect of Others. The opportunity to make an impact and develop professionally by leveraging your unique strengths and participating in valuable learning experiences. Highly competitive compensation, benefits and rewards programs that encourage you to bring your best every day and be recognized for doing so.
An engaging, people-first work environment offering work/life balance, employee resource groups, and social events to promote interaction and camaraderie.