Deputy Manager - Information Security Auditor - REF3017P

  • Full-time

Company Description

WNS (Holdings) Limited (NYSE: WNS), is a leading Business Process Management (BPM) company. We combine our deep industry knowledge with technology and analytics expertise to co-create innovative, digital-led transformational solutions with clients across 10 industries. We enable businesses in Travel, Insurance, Banking and Financial Services, Manufacturing, Retail and Consumer Packaged Goods, Shipping and Logistics, Healthcare, and Utilities to re-imagine their digital future and transform their outcomes with operational excellence.

We deliver an entire spectrum of BPM services in finance and accounting, procurement, customer interaction services and human resources leveraging collaborative models that are tailored to address the unique business challenges of each client. We co-create and execute the future vision of 400+ clients with the help of our 44,000+ employees. Our global footprint spans 16 countries with 61 delivery centers worldwide including in China, Costa Rica, India, the Philippines, Poland, Romania, South Africa, Spain, Sri Lanka, Turkey, United Kingdom and the United States.

Job Description

Carry out all information security risk assessment - PCI DSS, HIPAA, SSA16, GDPR, ISO 27001.

• Carry out Privacy risk and impact assessment for client operations and technology infrastructure

• Conducting operations audit based on Information security and privacy principles.

• Conducting review of contractual contracts, privacy contracts / exhibits / privacy agreements 

• Ensure various information security, privacy regulatory requirements /client’s data privacy requirements are effectively addressed. 

• Advise business unit leaders and risk management leaders in issues related to information security. 

• Handling information security incidents, data breaches investigations 

• Assist Risk management functional leaders in overseeing compliance activities relating to information security.

• Creation and maintenance of risk assessment trackers and keeping them current 

• Creation and maintenance of up-to-date inventory of sensitive information profiling for client operations 

• Ensure that contract arrangements are in place and being complied with. Obtain necessary evidence for the same. Conducting necessary due diligence on subcontractors / third party.

Qualifications

BE / BTech / BSC Computer Science / BCA / MCA / Masters in Information Security or Technology with Minimum 4-5 years of work experience in relevant field.

Privacy PolicyImprint