TransAsia Soft Tech (INSURTECH)Associate Vice President
Nov. 2023Chennai, Tamil Nadu, IndiaStrategic Planning: Develop and implement strategies for cybersecurity audits and assessments in alignment with the organization's goals and compliance requirements. Leadership: Provide leadership and direction to a team of cybersecurity professionals, guiding their efforts in conducting audits, assessments, and reviews. Audit Framework Development: Design and maintain audit frameworks, methodologies, and procedures to evaluate the effectiveness of cybersecurity controls and systems. Risk Assessment: Conduct risk assessments to identify potential cybersecurity threats, vulnerabilities, and risks across the organization's infrastructure, applications, and processes. Compliance and Standards: Ensure compliance with relevant regulations, industry standards, and best practices in cybersecurity, such as ISO, NIST, GDPR, etc. Audit Execution: Oversee the execution of cybersecurity audits, including planning, scoping, fieldwork, data analysis, and reporting. Security Controls Evaluation: Assess the adequacy and effectiveness of existing security controls and recommend improvements or enhancements as needed. Incident Response Preparedness: Develop and test incident response plans, ensuring the organization is well-prepared to handle cybersecurity incidents effectively. Reporting and Communication: Prepare comprehensive audit reports highlighting findings, recommendations, and remediation plans for various stakeholders, including senior management and regulatory bodies. Collaboration and Training: Collaborate with cross-functional teams to enhance cybersecurity awareness and provide training sessions to employees on best practices and emerging threats. Continuous Improvement: Continuously evaluate and enhance audit methodologies, tools, and processes to adapt to evolving cybersecurity risks and technological advancements.