Senior Security Consultant

IT services provider based out of the US

Senior Security Consultant

Jobdost

Company

Home

Senior Security Consultant

at IT services provider based out of the US

Agency job

via Jobdost

3 - 5 yrs

₹15L - ₹22L / yr

Bengaluru (Bangalore)

Skills

VA/PT

VAPT

IT security

Information security

Security audit

Data security

ITGC

IT risk

Internal audit

security services

Technical Audit

Job description Senior Security Consultant

Roles and Responsibilities

Company will provide a professional opportunity to work in a dynamic environment where you will have the ability to develop process and Cyber security based skills

Work profile of individual

cyber security consulting team, individual’s primary role would be to get to the heart of customer issues, diagnose problem areas, design innovative solutions and facilitate deployment resulting in client delight.
Will own and / Manage ISMS / ISO 27k projects IT audits, ITGC audits, SSAE, SOC audits, IT Process Audit, Systems Audit, Gap assessment TPRM, GDPR, Infosec, GRC , ISMS , Cyber Security, SOX ITGC on customer engagements
Will address all aspects of security like physical, logical, data, access etc and review Information Security policy and suggest / recommend necessary changes to the same on customer engagements
Will be an active participant in internal / third party system security reviews and audits on customer engagements
Will be an active participant in technical audits like VA / PT
Will perform internal audits on all aspects of IT and ensure compliance with the prescribed security norms on customer engagements and will be responsible for tracking the open audit findings and closure of the same
Will be responsible for implementation of new projects under Information Security Domain
Will be able to manage document tracking and updating - policies, processes, procedures, templates, etc.
Will plan the activities of configuration, conduct conference room pilots and will assist in resolving any queries related to requirements and Security control Design
Will develop a proposal by owning parts of the proposal document and by giving inputs in solution design based on areas of expertise.
Will engage with clients and(or) application development teams for implementation of cyber security & data privacy by design and data protection controls.
Will support the clients with ongoing design, implementation and maintenance of the data privacy framework for managing data protection risk including responding to legislation, devising and owning policies and training.
Will demonstrate ability to clearly and concisely communicate the privacy implications of technology and implementation.

Team work

Individual would be responsible for contributing to a strong team environment and promoting a positive working relationship with their colleagues.
Individual would predominately work with off-shore engagement teams and relevant teams on presale and cyber security delivery.
Communication, written and verbal, with these teams would be expected.
Team members would be required to apply learning from trainings and on the job experience to work requests and support continuous process improvement.
Team members would be required to handle multiple tasks at the same time.
Detailed focus when performing work and good project management skills when managing workload and maintaining timelines will be necessary.

Desired Candidate Profile

Bachelors
Certifications (ISO 27001/ ISO 31000/ CISA/ CISSP/ CSX or equivalent and other relevant qualification/certification
Experience : 8-10 years

Knowledge Required:

Strong knowledge of information security concepts, risk and controls concepts. Strong understanding of security principals: audit, policies, guidelines, and compliance.
Deep understanding of infrastructure (data centre, network end user computing) security / cloud security / managed security services / security operations centre / compliance risk management and ITGC controls
Good understanding of technical security like network security, operating system, encryption, use of tools and technologies for various processes like logical access control, network security, security monitoring etc.
Sound knowledge of Internal Controls and Compliance. Must be able to recommend controls around people, process, and technology.
Sound knowledge on IT controls (especially IT risks). Good experience with control assessment, check the effectiveness of the implemented controls and recommend mitigation / improvements.
Good knowledge on Privacy, Governance and reporting
Experience with the Microsoft Office suite of products (i.e. Word, Excel, PowerPoint, Visio, etc.),
Strong verbal and written communication skills Knowledge / experience in fields of ITGC audits, Internal Audit, External Audit / Statutory Audit projects
Candidates should exhibit good client service skill collateral's with a strong focus on building relationships.

Additional Responsibilities:

Ability to develop value-creating strategies and models that enable clients to innovate, drive growth and increase their business profitability
Good knowledge on software configuration management systems and license Management systems
Awareness of latest technologies and Industry trends
Logical thinking and problem solving skills along with an ability to collaborate
Understanding of the financial processes for various types of projects and the various pricing models available
Ability to assess the current processes, identify improvement areas and suggest the technology solutions
One or two industry domain knowledge
Client Interfacing skills
Project and Team management

Job description Senior Security Consultant

Roles and Responsibilities

Company will provide a professional opportunity to work in a dynamic environment where you will have the ability to develop process and Cyber security based skills

Work profile of individual

cyber security consulting team, individual’s primary role would be to get to the heart of customer issues, diagnose problem areas, design innovative solutions and facilitate deployment resulting in client delight.
Will own and / Manage ISMS / ISO 27k projects IT audits, ITGC audits, SSAE, SOC audits, IT Process Audit, Systems Audit, Gap assessment TPRM, GDPR, Infosec, GRC , ISMS , Cyber Security, SOX ITGC on customer engagements
Will address all aspects of security like physical, logical, data, access etc and review Information Security policy and suggest / recommend necessary changes to the same on customer engagements
Will be an active participant in internal / third party system security reviews and audits on customer engagements
Will be an active participant in technical audits like VA / PT
Will perform internal audits on all aspects of IT and ensure compliance with the prescribed security norms on customer engagements and will be responsible for tracking the open audit findings and closure of the same
Will be responsible for implementation of new projects under Information Security Domain
Will be able to manage document tracking and updating - policies, processes, procedures, templates, etc.
Will plan the activities of configuration, conduct conference room pilots and will assist in resolving any queries related to requirements and Security control Design
Will develop a proposal by owning parts of the proposal document and by giving inputs in solution design based on areas of expertise.
Will engage with clients and(or) application development teams for implementation of cyber security & data privacy by design and data protection controls.
Will support the clients with ongoing design, implementation and maintenance of the data privacy framework for managing data protection risk including responding to legislation, devising and owning policies and training.
Will demonstrate ability to clearly and concisely communicate the privacy implications of technology and implementation.

Team work

Individual would be responsible for contributing to a strong team environment and promoting a positive working relationship with their colleagues.
Individual would predominately work with off-shore engagement teams and relevant teams on presale and cyber security delivery.
Communication, written and verbal, with these teams would be expected.
Team members would be required to apply learning from trainings and on the job experience to work requests and support continuous process improvement.
Team members would be required to handle multiple tasks at the same time.
Detailed focus when performing work and good project management skills when managing workload and maintaining timelines will be necessary.

Desired Candidate Profile

Bachelors
Certifications (ISO 27001/ ISO 31000/ CISA/ CISSP/ CSX or equivalent and other relevant qualification/certification
Experience : 8-10 years

Knowledge Required:

Strong knowledge of information security concepts, risk and controls concepts. Strong understanding of security principals: audit, policies, guidelines, and compliance.
Deep understanding of infrastructure (data centre, network end user computing) security / cloud security / managed security services / security operations centre / compliance risk management and ITGC controls
Good understanding of technical security like network security, operating system, encryption, use of tools and technologies for various processes like logical access control, network security, security monitoring etc.
Sound knowledge of Internal Controls and Compliance. Must be able to recommend controls around people, process, and technology.
Sound knowledge on IT controls (especially IT risks). Good experience with control assessment, check the effectiveness of the implemented controls and recommend mitigation / improvements.
Good knowledge on Privacy, Governance and reporting
Experience with the Microsoft Office suite of products (i.e. Word, Excel, PowerPoint, Visio, etc.),
Strong verbal and written communication skills Knowledge / experience in fields of ITGC audits, Internal Audit, External Audit / Statutory Audit projects
Candidates should exhibit good client service skill collateral's with a strong focus on building relationships.

Additional Responsibilities:

Ability to develop value-creating strategies and models that enable clients to innovate, drive growth and increase their business profitability
Good knowledge on software configuration management systems and license Management systems
Awareness of latest technologies and Industry trends
Logical thinking and problem solving skills along with an ability to collaborate
Understanding of the financial processes for various types of projects and the various pricing models available
Ability to assess the current processes, identify improvement areas and suggest the technology solutions
One or two industry domain knowledge
Client Interfacing skills
Project and Team management

Users love Cutshort

Read about what our users have to say about finding their next opportunity on Cutshort.

Shubham Vishwakarma

Full Stack Developer - Averlon

I had an amazing experience. It was a delight getting interviewed via Cutshort. The entire end to end process was amazing. I would like to mention Reshika, she was just amazing wrt guiding me through the process. Thank you team.

Companies hiring on Cutshort

Similar jobs

Talent Acquisition Consultant

at Wissen Technology

4 recruiters

Posted by Seema Srivastava

Bengaluru (Bangalore), Mumbai

2 - 5 yrs

₹3L - ₹8L / yr

Recruitment/Talent Acquisition

ATS

Responsibilities

Coordinate with hiring managers to identify staffing needs and candidate selection criteria
Source applicants through online channels, such as LinkedIn and other professional networks
Create job descriptions and interview questions that reflect the requirements for each position
Compile lists of most-suitable candidates by assessing their CVs, portfolios, and references
Organize and attend job fairs and recruitment events to build a strong candidate pipeline
Maintain records of all materials used for recruitment, including interview notes and related paperwork, to share with key stakeholders

Required skills and qualifications

Two or three years of experience in a talent acquisition or similar role
Experience in full-cycle recruiting, using various interview techniques and evaluation methods
Proficiency with social media, CV databases, and professional networks
Experience in using LinkedIn Talent Solutions to proactively source candidates
Proficiency in documenting processes and keeping up with industry trends
Excellent interpersonal and communication skills

Preferred skills and qualifications

Bachelor’s degree (or equivalent) in human resources management or similar field
Knowledge of applicant tracking systems

Responsibilities

Coordinate with hiring managers to identify staffing needs and candidate selection criteria
Source applicants through online channels, such as LinkedIn and other professional networks
Create job descriptions and interview questions that reflect the requirements for each position
Compile lists of most-suitable candidates by assessing their CVs, portfolios, and references
Organize and attend job fairs and recruitment events to build a strong candidate pipeline
Maintain records of all materials used for recruitment, including interview notes and related paperwork, to share with key stakeholders

Required skills and qualifications

Two or three years of experience in a talent acquisition or similar role
Experience in full-cycle recruiting, using various interview techniques and evaluation methods
Proficiency with social media, CV databases, and professional networks
Experience in using LinkedIn Talent Solutions to proactively source candidates
Proficiency in documenting processes and keeping up with industry trends
Excellent interpersonal and communication skills

Preferred skills and qualifications

Bachelor’s degree (or equivalent) in human resources management or similar field
Knowledge of applicant tracking systems

IT Manager

at BlueBox Infosoft

Posted by Khushi Rai

Vadodara, Bengaluru (Bangalore), Mumbai, Delhi, Gurugram, Noida, Ghaziabad, Faridabad, Pune

8 - 12 yrs

₹8L - ₹12L / yr

Amazon Web Services (AWS)

Windows Azure

Cyber Security

IT audit

Compliance

+1 more

Job description

We are seeking a highly skilled and experienced IT Department Head with strong communication skills, a technical background, and leadership capabilities to manage our IT team. The ideal candidate will be responsible for overseeing the organization's IT infrastructure, ensuring the security and efficiency of our systems, and maintaining compliance with relevant industry standards. The role requires an

in-depth understanding of cloud technologies , server management, network security, managed IT services, and strong problem-solving capabilities.

Key Responsibilities:-

The Information Technology Manager is a proactive and hands-on IT Manager to oversee and evolve our technology infrastructure

· In this role, the Manager will manage all aspects of our IT operations, from maintaining our current tech stack to strategizing and implementing future developments

· This position will ensure that our technology systems are modern, secure, and efficient, aligning IT initiatives with our business goals

· IT Strategy & Leadership: Develop and execute an IT strategy that supports the company's objectives, ensuring scalability and security

· Infrastructure Management: Oversee the maintenance and optimization of our Azure Cloud infrastructure, AWS Cloud, and Cisco Meraki networking systems

· Software & Systems Administration: Manage Microsoft 365 administration.

· Cybersecurity: Enhance our cybersecurity posture using tools like Sentinel One, Sophos Firewall and other tools

· Project Management: Lead IT projects, including system upgrades and optimizations, ensuring timely delivery and adherence to budgets

· Team Leadership: Mentor and guide a small IT team, fostering a culture of continuous improvement and professional development

· Vendor Management: Collaborate with external vendors and service providers to ensure optimal performance and cost-effectiveness

· Technical Support: Provide high-level technical support and troubleshooting for IT-related issues across the organization and client in USA Other duties as needed

· IT Audit & Compliance: Conduct regular audits to ensure IT processes are compliant with security regulations and best practices (GDPR, SOC2, ISO 27001), ensuring readiness for internal and external audit.

· Documentation: Maintain thorough and accurate documentation for all systems, processes, and procedures to ensure clarity and consistency in IT operations.

Preferred Skills:-

. Experience with SOC 2, ISO 27001, or similar security frameworks.

. Experience with advanced firewall configurations and network

architecture.

Job Type: Full-time

Benefits:

Paid sick time

Shift:

Day shift

Work Days:

Monday to Friday

Experience:

IT management: 2 years (Required)

Work Location: In person