AVP-Information Security & Data Privacy

The primary function of this role is to assist in the development, implementation & enforcement of our privacy policies & procedures within organization in-line with business requirements and prevailing regulatory directions. The role also requires the individual to assist in the design of Information Security controls and ensure that all relevant risks are identified and appropriately addressed in line with Company's risk appetite. Individual is required to interact across various departments including Sales, Operations, IT, Facilities & Admin, Finance etc. and help facilitate key practical solutions pertaining to domain areas listed above.Review & assessment of security logs for applicable devices during any security breach Ensure security related controls are documented as a part of functional RCA framework and the same is periodically assessed in conjunction with first line of defense Assist in maintenance and improvement of information security & Data privacy framework in the CompanyIn-depth knowledge of global data protection laws and regulations including GDPR, CCPA, and other regulated Privacy laws.Assist in maintaining a Privacy framework pertaining to identification of critical information assets, conducting a Privacy and Security risk assessment to ensure that controls deployed are commensurate with the risk observedConduct IS and Data Privacy risk reviews for key outsourced vendors, perform due diligence reviews from an IS and Data Privacy perspective, identify issues, recommend remediation strategies and monitor closure while working in collaboration with respective functionsEnsure all function owners are aware of requirements mandated as a part of Information Security and Data Privacy framework & the same is embedded in their processes Security & Data Privacy related controls are implemented in line with the risk appetite of the CompanyEnsuring all risks with respect to Information Security & data privacy are identified and appropriately mitigated and exposure is not unreasonable and outside the risk appetite of the CompanyParticipates, contributes and guides other team members in projects where consideration of IS risk and Data Privacy controls are relevant like outsourcing, online e-commerce initiatives, new office infrastructure setup and other IT initiatives including system integration initiatives with banks, etc.Serves as the point of contact for Data Protection and privacy related queriesParticipates, contributes and guides other team members in projects where consideration of IS risk and Data Privacy controls are relevant like outsourcing, online e-commerce initiatives, new office infrastructure setup and other IT initiatives including system integration initiatives with banks, etc.Serves as the point of contact for Data Protection and privacy related queries PRB