Job Title:
Security Risk Assurance (For a large GCC Client)
Company: Crystal Peak
Location: Bangalore, Karnataka
Created: 2026-05-09
Job Type: Full Time
Job Description:
Location: Bangalore/ PuneRoles & Responsibilities:Manage the delivery of several assurance activities including the Security Assurance Framework (SAF) which is aligned with ISO 27001/2 and the Minimum Technical Security Baseline (MTSBv2) aligned to CIS compliance benchmarks. Also managing ISO 27001 external audits in an effective, timely, consistent, and professional manner.• Deliver Information Security Assurance audits using a Control/Risk Assessment methodology based on ISO27001 standards.• Coordinate a team of IS Security Analyst to cover efficiently an IT domain.• Deliver effective teamwork, communication, collaboration and commitment to deliver services.Experience, Skills & Certifications:• Previous business and or IT security and risk experience. (Minimum 4+ Years)• In depth experience of Security domains would be beneficial.• ISO27001/2 knowledge and experience essential; Understanding of NIST framework desirable.• Knowledge and understanding of CIS benchmarks desirable.• In depth knowledge of one or more sets of business processes, applications or key technologies (e.g. Networks, desktop and mid-range infrastructure, communication technologies) in use within the Company.• Excellent understanding of systems life cycles and project management.• Ability to assimilate information quickly, clearly identify key issues and present information concisely.• Ability to develop and maintain a wide network of contacts across the business.• Relevant professional qualifications e.g., CISSP, CISM, ISO27001 Lead Implementer/Auditor desirable.• Proactively anticipate customer issues / concerns for timely resolution-Maintain “Zero Surprise”Framework.• Excellent communications skills, guide others on executing commands on systems and be able to report write in English.• Be able to explain what was tested and the rationale for the test, relating back to the control objectives.• Experience in technical Information Security and conducting technical risk assessments• Operate adequately comfortably at management level• Strong facilitation, negotiation and conflict resolution skills• Proficient risk assessment, interpretation and analytical skills• Strong networking skills• Team player