Job Opportunity for Associate, Information Security at Room to Read in Global Office Asia – Main – New Delhi

**Job Title:** Associate, Information Security

**Job Location:** Global Office Asia – Main – New Delhi

**About Room to Read:**

Founded in 2000, Room to Read is a non-profit organization dedicated to creating a world free from illiteracy and gender inequality through education.  They work in historically low-income communities to develop literacy skills and support girls’ education, collaborating with governments and partner organizations to achieve large-scale positive outcomes for children.  Room to Read has impacted over 45 million children across 24 countries.

**Job Overview:**

This role focuses on security compliance management as an individual contributor.  The Associate will identify and address security gaps, develop and implement security policies, conduct risk assessments, and support internal and external audits.  Collaboration with cross-functional stakeholders is crucial to balancing compliance with efficient security solutions. This position reports to the Senior Director, Global Technology.

**Duties & Responsibilities:**

* Identify security gaps across various technology domains (applications, cloud, IT services, helpdesk) and conduct detailed assessments in collaboration with country officers.

* Draft and articulate information and cybersecurity policies, providing guidance to management and users.

* Develop, implement, and maintain processes to reduce information and IT risks across the enterprise (cloud, network, on-prem infrastructure).

* Implement and maintain standards such as ISO 27001, BCMS, NIST, and PCI DSS.

* Demonstrate a strong understanding of IT control frameworks and IT Governance, Risk, and Compliance (GRC), particularly regarding SOC2 Type I and Type II.

* Participate in internal and external risk assessments and remediation.

* Manage end-to-end risk remediation planning, resolution, and monitoring, including Technology Continuity Management planning and testing.

* Collaborate with senior business and IT leaders to resolve complex risk issues.

* Identify, evaluate, and manage application security risks associated with vendors, donors, and other external stakeholders.

**Qualifications and Desired Skills:**

* 5-7 years of relevant experience in IT Security & GRC in multiple capacities.

* Bachelor’s degree in IT, Computer Science, Cybersecurity, or equivalent experience.

* Certifications such as ISO 27001, CISA, CRISC, or CISM are advantageous.

* Understanding of cloud security standards (Azure/AWS/GCP).

* Excellent written and spoken English.

* Strong attention to detail, research, analytical, and critical thinking skills.

* Excellent documentation, oral and written communication, and interpersonal skills.

* Ability to work independently and as part of a team.