About the job

Office Location: Baluwatar, Kathmandu

Office Timing: 9:00 AM - 6:00 PM

Working Days: Monday- Friday

Job Descriptions:

Security Questionnaire and Documentation:

• Review, audit, and complete detailed security assessment questions to ensure thorough evaluations.
• Collaborate closely with subject matter experts to gather technical information for the creation, updating, and revision of documentation, as well as responding to security questionnaires, Request For Proposal (RFP), and staying updated on current writing methods, trends, and technologies in the field of security and compliance.

Third-Party Vendor Assessment:

• Conduct comprehensive security assessments of third-party vendors, evaluating their cybersecurity controls, practices, and compliance with industry standards.
• Analyze vendor-provided documentation, security questionnaires, and other relevant materials to identify potential risks and vulnerabilities

Knowledge Library Management:

• Contribute to building and maintaining knowledge libraries focused on compliance and regulations within the technology industry, with a specific emphasis on client requirements and best practices.

Client Deliverables:

• Provide high-quality deliverables to clients within agreed internal and external service level agreements (SLAs).

Communication and Collaboration:

• Actively raise issues, provide constructive feedback, and communicate effectively with Security Research Analysts and the Customer Operations Lead.

Continuous Learning:

• Contribute positively to our company culture, fostering collaboration, innovation, and a shared commitment to excellence.
• Research, recommend, and oversee industry best practices, compliance, and trends in cybersecurity.

Skills and Requirements:

• Be able to apply cyber security compliance experience and knowledge with creative and innovative thinking in a broad range of complex and non-routine contexts.
• Have an understanding and familiarization of SANS, NIST, and CISA.gov information security requirements. Strong understanding of security risk management frameworks and acts such as ISO 27001/27002, GDPR, HIPAA, CCPA, Data Privacy, business continuity, and major compliance key objectives.
• Strong communication and comprehension.
• Attention to detail.
• Ability to collaborate and work in teams.
• Bachelors (BA/BS) degree in Computer Science, Information Security, Information Technology, or equivalent is desirable.
• A prior experience in technology or a service delivery role is preferred.