Opening for Business Continuity Manager @ Mumbai

Hi,

Exp: 3+ Years

One of the certifications is mandatory.

• ISO/IEC 27001:2022 Lead Auditor
• ISO 22301 Lead Auditor
• Certified Information Systems Auditor (CISA)

• 3 years of relevant experience in cybersecurity GRC consulting, information security consulting, IT audit, risk advisory, compliance, or related roles.
• Perform ISO/IEC 27001:2022 ISMS gap assessments, internal audits, implementation support, risk assessments, control reviews, and certification-readiness activities.
• Support business continuity and resilience engagements aligned with ISO 22301, including BCMS documentation, business impact analysis, risk assessment, continuity planning, and exercise support.
• Conduct cybersecurity posture assessments, maturity assessments, control effectiveness reviews, and compliance gap assessments.
• Assess client environments against relevant frameworks and standards, including:
• ISO/IEC 27001:2022
• NIST Cybersecurity Framework and related NIST guidance
• SOC 2 Type II requirements
• Data Protection and Digital Personal Data Protection Act, 2023 (DPDPA) requirements
• General Data Protection Regulation (GDPR)
• Data privacy principles, privacy governance, and privacy-by-design requirements
• RBI cybersecurity, IT governance, outsourcing, digital-payment, and related regulatory requirements
• SEBI cybersecurity and cyber-resilience requirements
• IRDAI cybersecurity, information security, and related regulatory requirements
• Lead or support cyber risk management activities, including risk identification, control mapping, risk scoring, treatment planning, risk-register maintenance, and management reporting.
• Conduct Third-Party Risk Management (TPRM) assessments, including vendor due diligence, cybersecurity questionnaires, risk evaluation, contractual security requirements, and remediation tracking.

If interested, please share resume at deepika.eaga@quesscorp.com