RISK & COMPLIANCE EXPERT

• Experience and knowledge of frameworks/industry best practices like ISO 27001, NIST, SOC 2.

• Experience in implementation of such frameworks as ISO 27001, NIST, SOC 2

• Hands on experience in facing the external audits for ISO 27001, SOC 2

• Conduct end to end 3rd party risk management using Onetrust tool , that includes, launching of assessment to identification of risks, and following up with suppliers for risk mitigation.

• Work on the Management Action Plans of Internal audit findings and take them to closure.

• Development/ writing/ updating of specification documents/ surveys pertaining to Cyber security, physical security, product security.

• Excellent in developing risk dashboards in Power BI or any other similar tool to demonstrate the risk posture to senior management.

• Excellent verbal and written communication skills to be able to communicate ideas to senior management effectively.

• CTPAT - ISO 28001 (Knowledge)

• Counterfeit, taint avoidance and scrap management (ISO27036-3, SAE AS5553) (Knowledge)

• Develop and provide training to internal and external parties.

• Cybersecurity expertise is a must in understanding IT networks and deployment.

• NDAA 5949, NDAA 851, FAR 889 (Knowledge)

͏

͏

Deliver

		**No.  Performance Parameter  Measure**

		1.
		Verification
		Timeliness

		Quality of Code/ Number of defects

		Customer responsiveness

		Project documentation (scripts, test cases etc)

		2.
		Self-development
		Skill test for next level clearance on Trend Nxt

͏

͏