Specialist, Information Risk Management

Colt provides network, voice and data centre services to thousands of businesses around the world, allowing them to focus on delivering their business goals instead of the underlying infrastructure.
Job ID: 34833
Job Level: S2 Core
Job Location: Gurgaon/Bangalore
Function: Digital Information Office
Employment Type:Permanent
Working pattern: Hybrid
Why we need this role:
As the Information risk management specialist you will lead the cyber security risk management initiatives. You will collaborate with business functions across Colt to assess the cyber risks and manage our cyber risk within appetite. This role is critical in providing the GRC Manager and the S and R leadership team the appropriate risk information to make informed business
What you will do:
- Develop and continuously improve the information security risk methodologies and procedures
- Develop security risk learning and development materials to help with self:service risk management actions
- Undertake security risk assessments of internal systems, networks and outsourcing/third:party agreements
- Support the vendor risk management process, by helping developing an effective framework in compliance with industry standards and directives (NIS2, TSA, DORA etc)
- Drive improvement within IT governance, risk and compliance
- Implement security controls, risk assessment frameworks and programs that align to regulatory requirements
- Support internal and external security audits and assessments, like Colt 's information security accreditation initiatives like ISO27001, ND1643, ISAE3402 etc.
- Support information security compliance requirements in the countries where Colt operate
- Keeps current with information security threats and technical controls/solutions
- Interpret internal or external cyber security risk analyses in business terms and recommend a responsible course of action
- Manage security awareness program to provide robust security awareness and education to Colt 's personnel.
- Create engaging security training materials, conduct regular workshops, and evaluate the program 's effectiveness through, simulations, and feedback, and making improvements to address new security challenges.
- Help set up an effective control assurance program, support the process, carry out periodic reviews and assess effectiveness of controls, identify gaps and propose actions to over them
- Publish monthly security dashboard of Key cyber risks.
- Work with S and R Leadership to present information and influence change
What we 're looking for:
Skills and Experience
Must haves:
- Demonstrated understanding of existing and emerging technologies.
- Proven practical experience, in information security in a service provider or an enterprise environment. Experience in a telecommunications environment would be preferable.
- Proven experience in conducting complex risk assessments in accordance with a recognised risk assessment/management methodology.
- Demonstrated experience of working with ISO 27001, ISAE3402, GDPR etc.
- Demonstrated skills in problem resolution/trouble shooting (conception and technical).
- Demonstrated communication skills with the ability to build relationship and proven track record to get results.
- Proven
track record of working with teams across different geographies.
Qualifications
- CISSP or an equivalent security qualification.
- Bachelor 's degree or direct and applicable work experience.
- ISO 27001 Implementer or Lead Auditor.
- Experience in
designing
, building, and implementing security controls.
- Experience in security risk management : identification, analysis and mitigation of risk.
What we offer:
Colt is a growing business that is investing in its people. We offer skill development, learning pathways and accreditation to
Job Type: Permanent