Security Compliance Engineer Job in Mohali at HRS Group

HRS Group is hiring for the role of Security Compliance Engineer!

Responsibilities of the Candidate:

• Design and implement security policies and procedures, especially in the context of industry standards like ISO27001/2 and PCI-DSS.
• Ensure compliance with applicable laws, regulations, and standards (e.g., GDPR, HIPAA, PCI-DSS, ISO 27001).
• Monitor and report on compliance status to senior management.
• Conduct regular risk assessments to identify potential security threats and vulnerabilities.
• Perform vulnerability assessments and penetration tests of the platform.
• Assist in the development and implementation of incident response plans.
• Investigate security incidents and breaches, and implement corrective measures.
• Maintain comprehensive documentation of compliance efforts, including policies, procedures, and audit results.
• Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement.
• Engineer, implement, and monitor security measures for the protection of computer systems, networks, and information.
• Identify and define system security requirements.
• Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
• Ensure that security controls are effective and aligned with compliance requirements.

Requirements:

• Bachelor's degree from an accredited technical college or university or equivalent combination of education and experience.
• Fluency in English, both spoken and written, is essential.
• Extensive experience in establishing, implementing, and maintaining an Information Security Management System (ISMS), particularly in alignment with ISO27001 standards.
• Demonstrated ability to write, develop, and maintain comprehensive security policies and procedures.
• Experience in defining and implementing security procedures in close collaboration with business departments to ensure alignment with organizational goals and compliance requirements.
• Solid understanding of relevant standards and regulations such as GDPR, ISO27001, TISAX, SOC2/3 and PCI-DSS.
• Experience in conducting risk assessments and managing security compliance efforts within an enterprise environment.