Description

You will own the development, mapping, and maintenance of the internal Best Practice Assessment (BPA) program.

Responsibilities

• Analyze and map internal BPA policies to global compliance frameworks including ISO 27001, SOC 2, NIST CSF, NIST 800-53, GDPR, CCPA, and PCI DSS.
• Ensure alignment between internal security policies and global regulatory frameworks.
• Drive cross-functional improvements based on risk analysis.
• Maintain comprehensive documentation for the internal BPA program.

Required Skills

• 5+ years of experience in Governance, Risk, and Compliance (GRC).
• Deep expertise in information security standards and control mapping.
• Strong understanding of security frameworks: CIS Controls, ISO 27001, NIST SP 800-53, NIST CSF, PCI DSS, SOC 2.
• Familiarity with IT control frameworks like COBIT and IT general controls.
• Knowledge of security domains: Asset Management, IAM, Data Security, and Network Security.
• Must hold one or more certifications: CISSP, CISA, CISM, CEH, or ISO 27001 Lead Auditor/Implementer.

Key Skills

Education

Any Gradute