A challenging and rewarding advisory environment with the opportunity to directly impact the resilience of prominent regional organizations.
About the Role:
We are seeking a results-oriented GRC & IT Security Audit Consultant to join our team. This role focuses entirely on the compliance, framework, and process controls side of IT Security. If you excel at designing risk strategies, leading compliance frameworks, and conducting comprehensive IT security audits, this position offers an excellent opportunity to manage client engagements with a high degree of autonomy....
Interfaces and collaborate with other teams for incident escalations and resolution
Work closely with SOC Head to better security operations and address identified deficiencies
Perform due diligence and in-depth analysis on escalated security alert from Level-1 analyst and escalate to respective team for further action in timely manner...
Provide contract updates per customer and sales teams requests (add items, delete items, term changes, etc.) & work with Pricing & Business Operations team. Work directly with external customers to manage the contract modification process and set expectations.
Provide support to customers by coordinating with our finance department in answering any billing or invoicing questions.
Provide requested customer reporting on required regular customer requested cadences....
Ensure asset lifecycle aligns with security and audit requirements.
Manage secure disposal of IT assets in line with company policy and regulatory requirements and proper data sanitization / destruction before disposal....
Solution Advisory: Provide hands-on security architecture guidance to project delivery teams from project inception through post-implementation review.
Major Incident Oversight: Act as the senior technical escalation lead for high-severity (P1/P2) security incidents, breach responses, threat hunting escalations, and operational outages.
Root-Cause Analysis (RCA): Direct structural RCAs following critical incidents and conduct analyses on recurring operational bottlenecks, legacy technical debt, and friction points....
Maintain an updated broad product, competitor and disease knowledge, pharmacy and therapeutic process knowledge in therapeutic area to build professional customer relationships and support sound clinical discussions.
Plan and manage weekly work schedules with Sales Manager to enable an efficient, effective work execution and achieve coverage and frequency targets (quantity & quality) and deliver agreed customer centric activities within operating budget
Develop and implement account plans in collaboration with internal stakeholders for assigned accounts and/or key customers to identify opportunities, gaining commitment from HCPs to identify unmet customer and patient needs and optimize account performance....
Security Framework Alignment: Oversee the definition and maintenance of the Bank’s technical security standards, ensuring strict alignment with industry frameworks (e.g., NIST, PCI-DSS, ISO/IEC 27001, SOC 2, CIS Benchmarks).
Policy & Standard Engineering: Guide the review and updating of technical security policies, baselines, and procedures for Web Application Firewalls (WAF), Web Proxies, Enterprise VPNs, Network Access Control (NAC) systems (Cisco ISE), and related perimeter devices.
Audit & Compliance Remediation: Lead technical readiness for internal, external, and regulatory audits. Drive team execution to track, prioritize, and validate the remediation of security findings and vulnerabilities across business units....
Metrics & Reporting: Report and track Internal, Paynet & BNM regulatory Key Risk Indicators (KRIs) regarding control effectiveness.
WAF & Application Layer Governance: Define the governance framework for Web Application Firewall (WAF) deployments. Establish standards for rule tuning, core rule sets (e.g., OWASP Top 10 mitigation), API security baselines, SSL/TLS decryption profiles, and the management of false-positive thresholds to protect critical banking applications.
WiFi & Network Access Control (NAC) Governance: Define and audit the security architectures within Cisco ISE governing corporate, guest, and BYOD wireless networks. Establish strict baselines for 802.1X authentication, device profiling, and endpoint posture assessment before network admission....