Senior Security Consultant

IT services provider based out of the US

Senior Security Consultant

Jobdost

Company

Home

Senior Security Consultant

at IT services provider based out of the US

Agency job

via Jobdost

3 - 5 yrs

₹15L - ₹22L / yr

Bengaluru (Bangalore)

Skills

VA/PT

VAPT

IT security

Information security

Security audit

Data security

ITGC

IT risk

Internal audit

security services

Technical Audit

Job description Senior Security Consultant

Roles and Responsibilities

Company will provide a professional opportunity to work in a dynamic environment where you will have the ability to develop process and Cyber security based skills

Work profile of individual

cyber security consulting team, individual’s primary role would be to get to the heart of customer issues, diagnose problem areas, design innovative solutions and facilitate deployment resulting in client delight.
Will own and / Manage ISMS / ISO 27k projects IT audits, ITGC audits, SSAE, SOC audits, IT Process Audit, Systems Audit, Gap assessment TPRM, GDPR, Infosec, GRC , ISMS , Cyber Security, SOX ITGC on customer engagements
Will address all aspects of security like physical, logical, data, access etc and review Information Security policy and suggest / recommend necessary changes to the same on customer engagements
Will be an active participant in internal / third party system security reviews and audits on customer engagements
Will be an active participant in technical audits like VA / PT
Will perform internal audits on all aspects of IT and ensure compliance with the prescribed security norms on customer engagements and will be responsible for tracking the open audit findings and closure of the same
Will be responsible for implementation of new projects under Information Security Domain
Will be able to manage document tracking and updating - policies, processes, procedures, templates, etc.
Will plan the activities of configuration, conduct conference room pilots and will assist in resolving any queries related to requirements and Security control Design
Will develop a proposal by owning parts of the proposal document and by giving inputs in solution design based on areas of expertise.
Will engage with clients and(or) application development teams for implementation of cyber security & data privacy by design and data protection controls.
Will support the clients with ongoing design, implementation and maintenance of the data privacy framework for managing data protection risk including responding to legislation, devising and owning policies and training.
Will demonstrate ability to clearly and concisely communicate the privacy implications of technology and implementation.

Team work

Individual would be responsible for contributing to a strong team environment and promoting a positive working relationship with their colleagues.
Individual would predominately work with off-shore engagement teams and relevant teams on presale and cyber security delivery.
Communication, written and verbal, with these teams would be expected.
Team members would be required to apply learning from trainings and on the job experience to work requests and support continuous process improvement.
Team members would be required to handle multiple tasks at the same time.
Detailed focus when performing work and good project management skills when managing workload and maintaining timelines will be necessary.

Desired Candidate Profile

Bachelors
Certifications (ISO 27001/ ISO 31000/ CISA/ CISSP/ CSX or equivalent and other relevant qualification/certification
Experience : 8-10 years

Knowledge Required:

Strong knowledge of information security concepts, risk and controls concepts. Strong understanding of security principals: audit, policies, guidelines, and compliance.
Deep understanding of infrastructure (data centre, network end user computing) security / cloud security / managed security services / security operations centre / compliance risk management and ITGC controls
Good understanding of technical security like network security, operating system, encryption, use of tools and technologies for various processes like logical access control, network security, security monitoring etc.
Sound knowledge of Internal Controls and Compliance. Must be able to recommend controls around people, process, and technology.
Sound knowledge on IT controls (especially IT risks). Good experience with control assessment, check the effectiveness of the implemented controls and recommend mitigation / improvements.
Good knowledge on Privacy, Governance and reporting
Experience with the Microsoft Office suite of products (i.e. Word, Excel, PowerPoint, Visio, etc.),
Strong verbal and written communication skills Knowledge / experience in fields of ITGC audits, Internal Audit, External Audit / Statutory Audit projects
Candidates should exhibit good client service skill collateral's with a strong focus on building relationships.

Additional Responsibilities:

Ability to develop value-creating strategies and models that enable clients to innovate, drive growth and increase their business profitability
Good knowledge on software configuration management systems and license Management systems
Awareness of latest technologies and Industry trends
Logical thinking and problem solving skills along with an ability to collaborate
Understanding of the financial processes for various types of projects and the various pricing models available
Ability to assess the current processes, identify improvement areas and suggest the technology solutions
One or two industry domain knowledge
Client Interfacing skills
Project and Team management

Job description Senior Security Consultant

Roles and Responsibilities

Company will provide a professional opportunity to work in a dynamic environment where you will have the ability to develop process and Cyber security based skills

Work profile of individual

cyber security consulting team, individual’s primary role would be to get to the heart of customer issues, diagnose problem areas, design innovative solutions and facilitate deployment resulting in client delight.
Will own and / Manage ISMS / ISO 27k projects IT audits, ITGC audits, SSAE, SOC audits, IT Process Audit, Systems Audit, Gap assessment TPRM, GDPR, Infosec, GRC , ISMS , Cyber Security, SOX ITGC on customer engagements
Will address all aspects of security like physical, logical, data, access etc and review Information Security policy and suggest / recommend necessary changes to the same on customer engagements
Will be an active participant in internal / third party system security reviews and audits on customer engagements
Will be an active participant in technical audits like VA / PT
Will perform internal audits on all aspects of IT and ensure compliance with the prescribed security norms on customer engagements and will be responsible for tracking the open audit findings and closure of the same
Will be responsible for implementation of new projects under Information Security Domain
Will be able to manage document tracking and updating - policies, processes, procedures, templates, etc.
Will plan the activities of configuration, conduct conference room pilots and will assist in resolving any queries related to requirements and Security control Design
Will develop a proposal by owning parts of the proposal document and by giving inputs in solution design based on areas of expertise.
Will engage with clients and(or) application development teams for implementation of cyber security & data privacy by design and data protection controls.
Will support the clients with ongoing design, implementation and maintenance of the data privacy framework for managing data protection risk including responding to legislation, devising and owning policies and training.
Will demonstrate ability to clearly and concisely communicate the privacy implications of technology and implementation.

Team work

Individual would be responsible for contributing to a strong team environment and promoting a positive working relationship with their colleagues.
Individual would predominately work with off-shore engagement teams and relevant teams on presale and cyber security delivery.
Communication, written and verbal, with these teams would be expected.
Team members would be required to apply learning from trainings and on the job experience to work requests and support continuous process improvement.
Team members would be required to handle multiple tasks at the same time.
Detailed focus when performing work and good project management skills when managing workload and maintaining timelines will be necessary.

Desired Candidate Profile

Bachelors
Certifications (ISO 27001/ ISO 31000/ CISA/ CISSP/ CSX or equivalent and other relevant qualification/certification
Experience : 8-10 years

Knowledge Required:

Strong knowledge of information security concepts, risk and controls concepts. Strong understanding of security principals: audit, policies, guidelines, and compliance.
Deep understanding of infrastructure (data centre, network end user computing) security / cloud security / managed security services / security operations centre / compliance risk management and ITGC controls
Good understanding of technical security like network security, operating system, encryption, use of tools and technologies for various processes like logical access control, network security, security monitoring etc.
Sound knowledge of Internal Controls and Compliance. Must be able to recommend controls around people, process, and technology.
Sound knowledge on IT controls (especially IT risks). Good experience with control assessment, check the effectiveness of the implemented controls and recommend mitigation / improvements.
Good knowledge on Privacy, Governance and reporting
Experience with the Microsoft Office suite of products (i.e. Word, Excel, PowerPoint, Visio, etc.),
Strong verbal and written communication skills Knowledge / experience in fields of ITGC audits, Internal Audit, External Audit / Statutory Audit projects
Candidates should exhibit good client service skill collateral's with a strong focus on building relationships.

Additional Responsibilities:

Ability to develop value-creating strategies and models that enable clients to innovate, drive growth and increase their business profitability
Good knowledge on software configuration management systems and license Management systems
Awareness of latest technologies and Industry trends
Logical thinking and problem solving skills along with an ability to collaborate
Understanding of the financial processes for various types of projects and the various pricing models available
Ability to assess the current processes, identify improvement areas and suggest the technology solutions
One or two industry domain knowledge
Client Interfacing skills
Project and Team management

Users love Cutshort

Read about what our users have to say about finding their next opportunity on Cutshort.

Subodh Popalwar

Software Engineer, Memorres

For 2 years, I had trouble finding a company with good work culture and a role that will help me grow in my career. Soon after I started using Cutshort, I had access to information about the work culture, compensation and what each company was clearly offering.

Companies hiring on Cutshort

Similar jobs

Data Scientist (Radiology, LLM multi model)

Client located in Bangalore

Agency job

via Rohini IT Consulting LLP by Supriya C

Remote only

4 - 7 yrs

₹15L - ₹20L / yr

Large Language Models (LLM) tuning

rediology

text

classical models

visual image

Data Scientist (Radiology, LLM multi model)

Location: Bangalore

Experience: 4 to 7 Years

Work mode: Remote

Job Description

We are seeking a highly skilled Senior Machine Learning Engineer with a deep passion for applying cutting-edge AI techniques to revolutionize healthcare. You will be a key contributor to our team, developing and deploying innovative solutions to address critical challenges in medical imaging.

Responsibilities

Develop and implement advanced machine learning models for image analysis, processing, and interpretation in the radiology domain.

Collaborate with radiologists and clinicians to understand their needs and translate them into technical requirements.

Explore and apply state-of-the-art deep learning techniques, including convolutional neural networks (CNNs), recurrent neural networks (RNNs), and transformer-based models.

Develop and optimize machine learning pipelines for efficient data ingestion, preprocessing, feature engineering, model training, evaluation, and deployment.

Conduct rigorous experimentation and analysis to improve model performance and generalizability.

Stay up-to-date with the latest advancements in machine learning and computer vision research.

Collaborate with cross-functional teams to integrate machine learning solutions into clinical workflows.

Qualifications

Master's or Ph.D. in Computer Science, Electrical Engineering, or a related field with a focus on machine learning or computer vision.

4-7 years of hands-on experience in developing and deploying machine learning models in a production environment.

Strong proficiency in Python programming and deep learning frameworks (TensorFlow, PyTorch).

Expertise in image processing, computer vision, and medical image analysis techniques.

Experience with classical machine learning algorithms and their applications.

Understanding of deep learning architectures and their application to medical imaging tasks (e.g., image classification, object detection, segmentation).

Ability to work effectively with large and complex datasets.

Strong problem-solving, analytical, and critical thinking skills.

Excellent communication and collaboration skills.

Experience in the healthcare domain is a plus.

Knowledge of cloud platforms (AWS, GCP, Azure) is a plus.

Nice to Have

Experience with natural language processing (NLP) and multi-modal models.

Knowledge of medical imaging modalities (X-ray, CT, MRI, ultrasound).

Familiarity with medical image standards (DICOM).