Business Analyst

Job description:

Company: Glan Management Consultancy

Location: Gurgaon

Experience: 7-15 year

Salary:

Employment Type:

Job Description:

Job Title: Manager Information Security – ITJob Purpose: Acting in a key technical management & execution capacity to provide a conduit between IT teams and key business stakeholders in your functional area of IT Security to ensure information technology needs are managed consistently, following professional IT and global standards, and delivered with a high level of quality and customer satisfaction.Reward level: Middle ManagementJob Location GurgaonExperience 10+ yearsRelevant Experience 7+ yearsReporting to: General ManagerQualification: Bachelor degree in ITKey Deliverables:

• Provide support as Lead auditor towards ISMS and PIMS policies, procedures, and guidelines and perform regular review and update.
• Perform deep assessment to gather evidence of continuous compliance with ISO 27001:2022 and ISO 27701:2019, DPDPA, IT Act and Cert In Regulation including audit logs, records of reviews, timely closure of open audit and risks and sharing the report with management.
• Conduct regular, documented information security and privacy risk assessments identifying assets, threats, vulnerabilities, likelihood, and impact with stakeholders.
• Prioritize identified vulnerabilities, detailed findings, remediation recommendations, trending reports on vulnerability posture towards closure with stakeholders.
• Development and implementation of a comprehensive, ongoing security awareness and training program for all employees.
• Encourage secure behaviours among colleagues and reinforce the importance of information security and privacy in daily operations.
• Prepare regular report on overall information security posture, GRC maturity, and risk landscape to relevant stakeholders
• Ability to collect lessons learned from incidents, audits, and assessments to drive continuous improvement in ISMS/PIMS and security processes.
• Key Relationships
• Internal IT and business customers.
• Global IT Vendor, market and global (HQ) colleagues, Local vendor partners
• Internal staff - direct reports (where applicable)IT vendors, contractors (where applicable)
• Knowledge Skills and Abilities:
• Must possess and demonstrate ISO 27001 Lead Implementer/Auditor and ISO 27701 Lead Implementer/Auditor certifications and knowledge.
• In depth understanding of IT Act, DPDPA, Cert In regulations, CIS Controls as well as UK DPA and ISO 31000
• Good to have certification on CISM (Certified Information Security Manager), CISSP (Certified Information Systems Security Professional) and Cloud Security certifications (e.g., CCSK, CCSP, vendor-specific like AWS Security Specialty)
• Familiarity with common vulnerability scanning tools like Qualys (features, reporting, agent-based vs. network scans) and Cloud Security Posture Management (CSPM) tools like Wiz (cloud service provider configurations, misconfigurations, compliance checks in AWS, Azure, GCP).
• Understanding of various penetration testing types (e.g., network, web application, API, mobile, cloud) and methodologies
• Knowledge of common attack vectors and exploitation techniques like MITRE ATTACK and DEFEND framework.
• Basic to intermediate knowledge of common security controls and technologies (e.g., firewalls, EDR, Cloud Security, VAPT tools, SIEM, WAF, DLP, encryption).
• Understanding of network protocols, operating systems (Windows, Linux), and common application architectures.
• Knowledge of audit principles and practices (internal and external audits).
• Understanding of corrective action planning and non-conformity management.
• Understanding of third-party risk management principles and vendor due diligence processes.
• Excellent technical writing skills for creating clear, concise, and comprehensive security policies, standards, and procedures.
• Ability to analyse complex risk data and present actionable insights.
• Hands-on experience with Qualys for configuring scans, analysing reports, and managing vulnerabilities.
• Hands-on experience with Wiz CSPM for monitoring cloud environments, identifying misconfigurations, and generating compliance reports.
• Proficiency with GRC platforms or tools for managing policies, risks, and controls
• Exceptional verbal and written communication skills to articulate complex security concepts to technical and non-technical stakeholders
• Ability to build strong relationships and collaborate effectively with diverse teams (IT, Legal, HR, Development, Business Units).
• Skills in influencing behaviour and driving change across the organization to improve security posture.
• Strong analytical skills to diagnose security issues, identify root causes, and develop effective solutions.
• Ability to critically evaluate security controls and identify gaps.
• Contract review and negotiation skills specifically for security-related services.
• Ability to effectively manage vendor relationships and performance.
• Ability to develop and deliver engaging security training sessions and awareness campaigns.
• Ability to stay updated with the latest security threats, vulnerabilities, technologies, and regulatory changes.
• Capacity to quickly learn and adapt to new tools and methodologies.
• Meticulous attention to detail in policy creation, audit documentation, and vulnerability analysis.
• Ability to act calmly and effectively during security incidents and contribute to incident response efforts.

mail updated resume with salary details-

Key Skill:

information security manager, IT security, ISO 27001 LA, ISO 27001 LI, ISO 27001 LI/LA, ISO 27701, ISO 31000, internal auditor, DPDPA, CISM, compliance ISO 27001:2022

Job Title: iOS Developer (Swift Developer)

Experience: 6months-1 year

Location: Onsite (Noida sector 63)

Note: FRESHERS ARE NOT CONSIDERED

PERFERRED CANDIDATE LOCATION: Delhi/NCR

Role Overview:

Responsibilities:

• Designing & building mobile application for Apples iOS platform.
• Collaborating with the design team to define application features.
• Ensuring Quality & performance of the application to specifications.
• Identifying potential problems & resolving application bottlenecks.
• Fixing applications bugs before the final release, publishing application on Application store.
• Maintaining the code & optimization of the application.
• Designing & implementing app updates.

Skills Required:

• Swift
• Objective-C
• Xcode
• iOS Development
• UIKit
• Core Data
• Interface Builder
• Cocoa Touch
• MVVM
• JSON
• Memory Management

Job Description:

As an Azure Data Engineer, your role will involve designing, developing, and maintaining data solutions on the Azure platform. You will be responsible for building and optimizing data pipelines, ensuring data quality and reliability, and implementing data processing and transformation logic. Your expertise in Azure Databricks, Python, SQL, Azure Data Factory (ADF), PySpark, and Scala will be essential for performing the following key responsibilities:

Designing and developing data pipelines: You will design and implement scalable and efficient data pipelines using Azure Databricks, PySpark, and Scala. This includes data ingestion, data transformation, and data loading processes.

Data modeling and database design: You will design and implement data models to support efficient data storage, retrieval, and analysis. This may involve working with relational databases, data lakes, or other storage solutions on the Azure platform.

Data integration and orchestration: You will leverage Azure Data Factory (ADF) to orchestrate data integration workflows and manage data movement across various data sources and targets. This includes scheduling and monitoring data pipelines.

Data quality and governance: You will implement data quality checks, validation rules, and data governance processes to ensure data accuracy, consistency, and compliance with relevant regulations and standards.

Performance optimization: You will optimize data pipelines and queries to improve overall system performance and reduce processing time. This may involve tuning SQL queries, optimizing data transformation logic, and leveraging caching techniques.

Monitoring and troubleshooting: You will monitor data pipelines, identify performance bottlenecks, and troubleshoot issues related to data ingestion, processing, and transformation. You will work closely with cross-functional teams to resolve data-related problems.

Documentation and collaboration: You will document data pipelines, data flows, and data transformation processes. You will collaborate with data scientists, analysts, and other stakeholders to understand their data requirements and provide data engineering support.

Skills and Qualifications:

Strong experience with Azure Databricks, Python, SQL, ADF, PySpark, and Scala.

Proficiency in designing and developing data pipelines and ETL processes.

Solid understanding of data modeling concepts and database design principles.

Familiarity with data integration and orchestration using Azure Data Factory.

Knowledge of data quality management and data governance practices.

Experience with performance tuning and optimization of data pipelines.

Strong problem-solving and troubleshooting skills related to data engineering.

Excellent collaboration and communication skills to work effectively in cross-functional teams.

Understanding of cloud computing principles and experience with Azure services.

Are you looking for a Senior Backend Engineer role in a high growth startup? Are you eager to learn and make a difference at work every day? If so, then read on.

At PlumQR, we work on revolutionizing the Food & Beverage industry with our cloud-based tech products. Millions of businesses across the world are switching for better, smarter & more hygienic products to reinvent their businesses. If you have what it takes to innovate & lead, we have just the right opportunity for you.

Requirements

• Minimum 3 years as a Senior Backend Engineer
• Strong software development experience in a SaaS product company
• Significant experience with NodeJS, React.js, React Native, MySQL, MongoDB, Java
• Cloud computing services (e.g. Google Cloud Platform)
• Strong problem-solving skills
• Ability to explain technical details to people inside the company