Get alerts for new jobs matching your selected skills, preferred locations, and experience range. Manage Job Alerts
7 - 11 years
5 - 9 Lacs
Bengaluru
Work from Office
Project Role : Application Designer Project Role Description : Assist in defining requirements and designing applications to meet business process and application requirements. Must have skills : AWS Architecture Good to have skills : NA Minimum 7.5 year(s) of experience is required Educational Qualification : Should be a Graduate Should be a AWS certified Summary :As an Application Designer with expertise in AWS Architecture, you will be responsible for designing and defining requirements for applications that meet business process and application requirements. Your typical day will involve working with cross-functional teams, analyzing business requirements, and designing scalable and secure AWS architectures. Roles & Responsibilities: Design and develop scalable and secure AWS architectures for applications, ensuring high availability, fault tolerance, and disaster recovery. Collaborate with cross-functional teams to analyze business requirements and design applications that meet business process and application requirements. Develop and maintain technical documentation, including architecture diagrams, design documents, and standard operating procedures. Provide technical guidance and mentorship to junior team members, ensuring adherence to best practices and standards for AWS architecture design and development. Stay updated with the latest advancements in AWS architecture and cloud computing, integrating innovative approaches for sustained competitive advantage. Professional & Technical Skills: Must To Have Skills:Expertise in AWS architecture design and development and Terraform . Good To Have Skills:Experience with other cloud platforms such as Azure or Google Cloud Platform. Strong understanding of cloud computing concepts and principles, including Infrastructure as Code (IaC), DevOps, and microservices architecture. Experience with containerization technologies such as Docker and Kubernetes. Experience with scripting languages such as Python or Bash. Solid grasp of networking concepts and protocols, including TCP/IP, DNS, and VPN. Experience with security and compliance frameworks such as SOC 2, PCI DSS, and HIPAA. Additional Information: The candidate should have a minimum of 7.5 years of experience in AWS architecture design and development. The ideal candidate will possess a strong educational background in computer science, information technology, or a related field, along with a proven track record of delivering scalable and secure AWS architectures. This position is based at our Bengaluru office. Qualification Should be a Graduate Should be a AWS certified
Posted 1 month ago
10 - 12 years
10 - 15 Lacs
Bengaluru
Work from Office
IT Internal Audit Manager Organization:Corporate Functions/Finance Location: Bangalore, India Level:7 - Manager People in the Corporate Function career track contribute to the running of Accenture as a high- performance business through specialization within a specific functional area and grow into internally focused roles by deepening their skills and/or developing new skills within an internal functional area. Finance professionals prepare and interpret financial plans and reports, ensuring accuracy and compliance with applicable financial rules and regulations, including internal financial controls, to mitigate risk for the company. Finance professionals may also shape and execute client deals to maximize the use of Accenture's capital and resources, manage cash and/or liaise with the investor community. Job Description: The Internal Auditor performs audit projects in accordance with Accenture's audit methodology and The Institute of Internal Auditors' (IIA) International Standards for the Professional Practice of Internal Auditing. The Internal Auditor-Information Technology focuses on audit projects that involve cyber/data security, computer operations, and IT compliance. The Internal Auditor effectively executes a wide range of Internal Audit activities in a high quality and timely manner. In their role, they perform activities that include planning and developing work programs, identifying recommendations for continuous improvement in global processes and controls, communicating results, and following up on issues reported. They are also responsible for audit strategy development, organization risk assessment/planning, and completion of special requests for Accenture Management and the Audit Committee. Key Responsibilities Depending on the role/organization the Internal Auditor-Information Technology belongs to and their career level, some or all of the following key responsibilities will apply: Participates in the detailed execution and communication of the risk-based work plan, including Accenture Management and Audit Committee special project requests. Verifies the adequacy of information technology (IT) operating procedures of the company through a systemic program of audits. Assists in development of the Company's annual audit plan and schedule. Manages audit work, including audit work plan, work papers, findings, and associated reports. Prepares and oversees the preparation of audit reports and work papers to ensure adequate documentation exists to support the completed audit and conclusions. Conducts IT integrated audits with operational, compliance, financial, and investigative audit teams, as assigned. Manages cyber/data security, IT operations, IT service delivery, and compliance audits, as assigned on a wide-ranging scope of audits with an emphasis on assessing emerging areas of risk including cyber security, artificial intelligence, cloud computing, robotic process automation, and the Internet of Things Identifies, recommends, and reports improvement opportunities for global processes and controls. As appropriate, identifies opportunities for continuous improvement of technology, security, financial, and other processes and evaluation of organization-driven risk. Manages auditee relationship, including facilitating meetings, discussions of findings, and presenting draft and final reports in a professional manner. Prepares well-written and timely audit reports and high quality presentations for leadership and board level reporting. Develops audit skills and establishes/maintains relationships related to the risk areas assigned. Contributes to appropriate skilling of the IA team (e.g., recruiting, training and development, coaching/mentoring, providing career growth opportunities). Keeps abreast of company policies and procedures, current developments in technology and auditing professions, and changes in local, state, and federal laws. Qualification Basic Qualifications: Bachelors Degree (Undergraduate degree in Computer Science/ Electronics/ IT Engineering, Information Systems, Business Administration) Certifications on Auditing and Information Security Domains (i.e. CIA, CISA, CISSP, CCSK) Cloud Security Azure Security (AZ500), AWS Certified Solutions Architect Understanding of industry standards including ISO27001, ISO 20K, NIST 800-53, PCI DSS, HIPAA, GDPR Minimum of 12 years experience in information technology auditing, combined audit/IT audit, or relevant information security or information technology roles. Preferred Qualifications: Big 4 experience Experience working in a global Internal Audit function Cyber security experience Strong working knowledge of operational, compliance and IT auditing techniques Broad IT knowledge in infrastructure technologies (networking, data centers, servers, etc.), application development and support, and emerging technologies. Experience with Windows and UNIX operating systems and Microsoft Office 365 Sarbanes-Oxley project experience, familiarity with COSO/COBIT framework Professional Skills: Excellent verbal and written communication skills; interpersonal and presentation skills Proven management and organizational skills Ability to train, develop, and motivate team members Demonstrated leadership in professional setting; either military or civilian Demonstrated teamwork and collaboration in a professional setting; either military or civilian Ability to adopt flexible work hours to collaborate with global teams and travel (up to 20%).
Posted 1 month ago
7 - 12 years
9 - 14 Lacs
Bengaluru
Work from Office
This role will lead efforts in identifying, tracking, and remediating weak encryption ciphers and protocols across our organization. This role is critical in supporting remediation plans for finding by managing a project that identifies non-compliant cryptographic implementations and coordinates with the appropriate stakeholders to get them in compliance. Key Responsibilities: Weak Encryption Analysis and Remediation: Identify and assess weak encryption algorithms, cipher suites and protocols used across enterprise application and infrastructure. Work on releases to remain up to date with strong and compliance cipher suites, protocols along with replacing weak encryption mechanism with strong industry-recommended alternatives (eg TLS 1.2/1.3, AES-256, SHA-256). Monitor and audit encryption practices for compliance with regulatory standard (eg NIST, PCI-DSS, HIPPA, ISO 27001). Conduct encryption Risk Assessment and implement mitigation strategies. Configure TLS/SSL protocols and cipher suites to ensure secure communication across networks and applications. Document encryption policies, standards, and technical procedures for internal and external compliance audits. Provide encryption solutions for cloud platforms such as AWS, Azure and Google cloud. Mandatory skills PKI, Cipher Governance Desired/ Secondary skills PKI, Cipher Governance
Posted 1 month ago
4 - 8 years
14 - 18 Lacs
Hyderabad
Work from Office
Minimum 1+ years experience in cyber risk assessments with industry certifications like CISSP, CCSP, CISA, CISM, CRISC, ISO/IEC. Profound knowledge of cybersecurity frameworks, industry standards, and best practices. Familiarity with cybersecurity policies and standards such as NIST and IEC. Experience in network security, infrastructure assessment, and network architecture design review. Knowledge of GDPR, PCI-DSS, NIST, and privacy regulations. Hands-on experience with cloud computing technologies. Experience in conducting end-to-end risk assessments, including impact assessments, regulatory assessments, and control assessments. Proficient in information security risk assessments for cloud services and vendor-managed applications. Hands-on experience in cloud security measures and best practices, ensuring data integrity and confidentiality in cloud environments. Conduct thorough cyber risk assessments for clients, analyzing digital infrastructure, systems, and security controls. Collaborate with cross-functional teams to gather essential information for comprehensive risk assessments. Evaluate and interpret assessment results to identify vulnerabilities and provide mitigation recommendations. Stay updated on cyber threats and industry best practices to enhance risk assessment effectiveness. Prepare clear reports summarizing assessment findings for clients and internal stakeholders. Manage client expectations and satisfaction, acting as an advisor. Excellent communication and presentation abilities for technical and non-technical audiences. Proactive, self-motivated, and committed to continuous learning.
Posted 1 month ago
3 - 8 years
5 - 10 Lacs
Hyderabad
Work from Office
Category Business Development Time Time Full time Location Hyderabad Business Development Manager - Hyderabad Requirements: Proven working experience as a business development manager or a relevant role. Overall experience of minimum 3+ years in software solution selling, or into the fintech industry. Experience in creating and managing channel sales. Experience in working with Banks as a channel partner will be highly preferable. Experience in creating and managing a high-performance sales team. Experience in setting up processes, Standard Operating Procedures, and continuous performance appraisal through relevant metrics. Strong communication and team management skills Analytical skills with a problem-solving attitude. Availability to travel all over the assigned territory. Degree in Sales, Business Administration, or relevant field Language preference English, Hindi Responsibilities: Develop and implement effective sales strategies Establish productive and professional relationships with key personnel in assigned customer/partner accounts Negotiate and close agreements with large customers/partners. Monitor and analyze performance metrics and suggest improvements Prepare monthly, quarterly, and annual sales forecasts Perform research and identify new potential customers and new market opportunities Provide timely and effective solutions aligned with clients needs Liaise with Marketing and Product Development departments to ensure brand consistency Stay up to date with new product launches and ensure sales team members are on board About Company SabPaisa (SRS Live Technologies) is an RBI Authorised Payment Aggregator. Founded in 2016 with headquarters in New Delhi, a corporate office in Kolkata, and regional offices across the country, it is a rapidly advancing fintech company. SabPaisa is dedicated to providing simplified payment solutions, offering customizable options tailored to the client s unique needs. How are we different: SabPaisa s dynamic, PCI-DSS and SSL-certified payment gateway offers secure online checkout with diverse options Cards, Net-Banking, UPI, Wallets, and offline choices like e-Cash, e-NEFT Bharat QR, available at nearly 10 Lac Cash Counters nationwide. Our white-labelled payments and collection suite partners with banks like BOI, BOB, IDFC First, Canara, UBI Indian Bank, processing over INR 94.9 billion.
Posted 1 month ago
2 - 7 years
4 - 9 Lacs
Bengaluru
Work from Office
Category Business Development Time Time Full time Location Bengaluru Sales Development Manager - Bengaluru Role Overview: The Sales Development Manager (SDM) will be responsible for driving lead generation and prospecting efforts for SabPaisa s payment solutions across multiple sectors, including education, retail, and other industries. The role involves managing lead research, conducting outreach, and ensuring seamless handoff to the sales team. Key Responsibilities: 1. Lead Research Profiling Conduct in-depth research on potential clients across various industries (education, retail, healthcare, etc.) to identify key decision-makers. Gather relevant information on an institution s or business s payment and transaction management systems. Maintain a structured and updated lead database with accurate profiles. 2. Cold Calling Outreach Execute structured cold-calling campaigns to introduce SabPaisa s services. Engage with decision-makers to qualify their interest in SabPaisa s solutions. Address initial queries and objections to move leads further along in the sales funnel. 3. Appointment Setting Follow-Ups Schedule meetings or product demos between qualified leads and the senior sales team. Monitor follow-up efficiency to maximize lead conversion rates. Coordinate and confirm meeting details with both internal teams and prospects. 4. CRM Database Management Maintain and oversee CRM hygiene, ensuring 100% accuracy in lead data entry. Track and analyze outreach performance metrics. 5. Market Insights Feedback Analyze data to identify trends, common pain points, and opportunities across industries. Share valuable insights with Sales and Marketing teams to refine sales strategies. Provide bi-weekly reports on outreach performance and market feedback. Key Performance Indicators (KPIs): Leads Researched per Week Profile at least 100 potential clients daily. Outbound Calls per Day Make at least 100 outbound calls daily. Meetings Scheduled Target of 10 qualified meetings per day. Lead-to-Meeting Conversion Rate Maintain a minimum conversion rate of 10%. CRM Data Accuracy Ensure 100% of lead information is correctly entered and maintained. Follow-up Efficiency Monitor and ensure timely follow-ups with leads. Performance Training Effectiveness Regularly assess performance and implement necessary training programs. Requirements: 2+ years of experience in Sales Development, Lead Generation, or a similar role in the education, fintech, retail, or other industries. Strong communication, negotiation, and problem-solving abilities. Proficiency in CRM tools and data-driven decision-making. High intent on execution, process improvement, and achieving targets. About Company SabPaisa (SRS Live Technologies) is an RBI Authorised Payment Aggregator. Founded in 2016 with headquarters in New Delhi, a corporate office in Kolkata, and regional offices across the country, it is a rapidly advancing fintech company. SabPaisa is dedicated to providing simplified payment solutions, offering customizable options tailored to the client s unique needs. How are we different: SabPaisa s dynamic, PCI-DSS and SSL-certified payment gateway offers secure online checkout with diverse options Cards, Net-Banking, UPI, Wallets, and offline choices like e-Cash, e-NEFT Bharat QR, available at nearly 10 Lac Cash Counters nationwide. Our white-labelled payments and collection suite partners with banks like BOI, BOB, IDFC First, Canara, UBI Indian Bank, processing over INR 94.9 billion.
Posted 1 month ago
10 - 12 years
35 - 45 Lacs
Bengaluru
Work from Office
Category Business Development Time Time Full time Location Bengaluru Banking Alliance - Bengaluru Job Responsibilities:- Lead and manage key partnerships with leading banks associated with SabPaisa Signup new banks under whitelabel or reference business model. Develop and implement comprehensive strategies to acquire and expand business across these banks, ensuring targets that are consistently met and exceeded. Build and nurture strong relationships at the senior levels within banking institutions and fintech ecosystems. Drive incremental growth across bank portfolios by creating tailored business acquisition strategies and leading efforts to secure new partnerships. Oversee the tracking and management of bank-specific KPIs, including the number of new acquisitions and overall business expansion. Establish clear growth targets and ensure the team is aligned to achieve sign-up milestones. Forge strategic collaborations with Banks as a fintech partner, to create innovative solutions and maximize business opportunities. Monitor the performance of new initiatives and optimize for growth. Provide leadership for integrations at the Head Office level, ensuring the execution of complex integrations with banks and fintech systems. Collaborate with cross-functional teams to ensure seamless onboarding and long-term operational success. Direct Reporting to Chief Business Officer. Job Requirements: Job Location: Bengaluru 10+ years of experience in senior business development or partnership management roles within banking, fintech, or related industries. Proven track record of successfully driving large-scale banking partnerships, new product adoption, and business growth in the financial sector. Exceptional leadership, communication, and negotiation skills, with the ability to influence senior stakeholders. Strong familiarity with emerging fintech products and banking technologies. In-depth knowledge of banking products, digital banking, fintech ecosystems, and emerging trends. Education: B.Tech (Engineering) followed by MBA will be preferred.
Posted 1 month ago
3 - 8 years
13 - 17 Lacs
Jaipur
Work from Office
Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : One Identity Manager Good to have skills : NA Minimum 3 year(s) of experience is required Educational Qualification : 15 years full time education Summary :As a Security Architect, you will define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Your typical day will involve collaborating with various teams to assess security needs, documenting security controls, and transitioning to cloud security-managed operations. You will engage in discussions to refine security strategies and ensure compliance with industry standards, all while adapting to the evolving landscape of cloud technologies. Roles & Responsibilities: Expected to perform independently and become an SME. Required active participation/contribution in team discussions. Contribute in providing solutions to work related problems. Conduct regular assessments of cloud security measures to identify potential vulnerabilities and recommend improvements. Collaborate with cross-functional teams to ensure alignment of security practices with business objectives. Professional & Technical Skills: Must To Have Skills: Proficiency in One Identity Manager. Strong understanding of cloud security principles and best practices. Experience with identity and access management solutions. Familiarity with compliance frameworks such as ISO 27001, NIST, or GDPR. Ability to analyze security incidents and develop effective response strategies. Additional Information: The candidate should have minimum 3 years of experience in One Identity Manager. This position is based at our Jaipur office. A 15 years full time education is required. Qualification 15 years full time education
Posted 1 month ago
2 - 5 years
10 - 15 Lacs
Bengaluru
Work from Office
IT Internal Audit Associate Manager We Are: Accenture is helping transform leading organizations and communities around the world. Choose Accenture and make delivering innovative work part of your extraordinary career. Accenture works at the intersection of business and technology to help clients improve their performance and create sustainable value for their stakeholders. Accenture is consistently recognized on FORTUNE's 100 Best Companies to Work For and DiversityInc's Top 50 Companies for Diversity lists. The Internal Audit Department provides the Audit Committee of the Board of Directors with an independent and objective assessment of the reliability and integrity of financial and select operating information, the effectiveness and efficiency of Accenture plc and its consolidated subsidiaries' (the "Company") systems and internal controls, and compliance with the Company's policies and procedures. Internal Audit Services also provides advisory services designed to add value and improve the Company's operations through bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, controls, operations, and governance processes. You Are: An agile, highly-motivated, innovative thinker with a background in audit, risk, or compliance looking to join a fast-paced, global internal audit organization that has embraced transformative capabilities including advanced analytics, dynamic risk assessment processes, and automation to retain its role as a trusted advisor to the business. The Work: Participate in the execution of the risk-based audit plan, reporting results to Accenture Leadership and the Audit Committee of the Board of Directors Conduct a wide-ranging scope of audits with an emphasis on assessing emerging areas of risk including cyber security, artificial intelligence, cloud computing, robotic process automation, and the Internet of Things. Through advisory services, work with our business partners to help them proactively identify and manage risk in new technologies, new go-to-market offerings, and critical corporate initiatives. Shape the future of the Accenture Internal Audit through involvement in departmental initiatives that enable us to become more efficient and effective in everything we do. Ensure your technical skill set and business acumen stay current and relevant through participation in our robust training program. Support the departmental annual risk assessment and audit planning efforts Why Should I Join the Accenture Team? You are looking for an internal audit role that provides you with exposure to senior levels of leadership, enables you to work with emerging technologies, provides opportunities for international travel and flexible work arrangements (work from home), requires little to no SOX testing, and offers a competitive salary and benefits package. Qualification Desired Skills & Qualifications Undergraduate degree in Computer Science, Information Systems, Electronics, or Business Administration. Minimum of 6 years of experience in IT auditing, information security, or related technical role focusing on compliance activities. Experience conducting IT external and internal audits or assessments, preferably for a global organization. Strong IT knowledge in infrastructure technologies (networking, data centers and hosting, virtualization, cloud etc.), application development and support, and emerging technologies. Understanding of industry standards including ISO27001, ISO 20K, NIST 800-53, PCI DSS, HIPAA, GDPR Experience leveraging predictive models and custom analytics in audit planning and execution is preferred. Technical knowledge and familiarity with control requirements in areas including ERP applications, Windows and Unix operating systems, cyber security, cloud security and vendor management. Strong verbal and written communication skills and proficiency with the English language. Demonstrated leadership, teamwork, and collaboration skills. Possession of a relevant professional certification (CISA, CISSP, CIA, CPA, CCSK) is preferred. Ability to adopt flexible work hours to collaborate with global teams and travel (up to 20%).
Posted 1 month ago
5 - 10 years
13 - 17 Lacs
Pune
Work from Office
Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : Security Solution Development Good to have skills : NA Minimum 5 year(s) of experience is required Educational Qualification : 15 years full time education Summary :As a Security Architect, you will define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. You will also document the implementation of the cloud security controls and transition to cloud security-managed operations. Roles & Responsibilities: Expected to be an SME Collaborate and manage the team to perform Responsible for team decisions Engage with multiple teams and contribute on key decisions Provide solutions to problems for their immediate team and across multiple teams Lead security solution development projects Conduct security assessments and audits Develop security policies and procedures Professional & Technical Skills: Must To Have Skills: Proficiency in Security Solution Development Strong understanding of cloud security principles Experience with security architecture design Knowledge of security compliance standards Hands-on experience with security tools and technologies Additional Information: The candidate should have a minimum of 5 years of experience in Security Solution Development This position is based at our Pune office A 15 years full time education is required Qualification 15 years full time education
Posted 1 month ago
5 - 8 years
6 - 11 Lacs
Bengaluru
Work from Office
Skill required: Risk & Compliance - Risk Management Designation: Risk and Compliance Senior Analyst Qualifications: Any Graduation Years of Experience: 5 to 8 years What would you do? We are seeking a highly skilled and motivated Risk & Compliance Specialist to join our dynamic team at Accenture. The ideal candidate will be responsible for executing risk-based audits, focusing on information technology global processes and controls. This role involves planning and developing audit work programs, executing audit test procedures, and identifying recommendations for continuous improvement of our Third-Party Risk Management (TPRM) program. The specialist will play a crucial role in third-party risk assessment, ensuring that our vendors and partners adhere to our stringent compliance standards. What are we looking for? Qualifications & Certifications: Bachelor's degree in information technology, computer science, or a related field. ISO 27001 LA/LI certificate is a must. Professional certifications such as CISSP, CISM, CISA, or CRISC certification preferred. Minimum of 4-7 years of experience in risk management, compliance, or a related field. Experience in conducting third-party risk assessments is essential. Experience in Big 4, global internal audit functions, or cybersecurity is a plus. Demonstrated experience in third-party risk management, operational risk, or other risk management roles with knowledge of third-party regulatory requirements.Technical Skill Requirements: Expertise in IT internal audit, information security/cybersecurity, third-party risk assessment reporting (e.g.,SOC1, SOC 2). Relevant expertise on CSA STAR requirements, ISO control, NIST standards, PCI DSS, and GDPR requirements. Experience in performing control testing, IT/infosec risk assessments, network security, and infrastructure assessments. Knowledge of technical domains such as cloud security and application security. Certification:CISA, CISSP, CEH, ISO, PCI DSS, NIST. Strong understanding of risk management and compliance principles. Roles and Responsibilities: Ensure third-party risk management policy and procedures, and third-party management software are implemented and completed according to Accenture requirements. Complete vetting on incoming third-party engagements and work with business partners to ensure data and due diligence is complete and accurate, and inherent risks are identified and mitigated in accordance with risk appetite. Coordinate the distribution of due diligence questionnaires to third parties, review submitted questionnaires for completeness, ensure risk stakeholders finalize reviews, and determine overall residual risk rating. Act as a strong liaison to ensure that risk stakeholder questions are answered by the business, or third party as required. Conduct certain aspects of third-party due diligence not covered by risk stakeholders. Store the artifacts of the third-party oversight process in the system of record. Contribute to the development of detailed procedural documents and ensure alignment of TPRM with regulatory requirements. Identify, prioritize, and pursue opportunities to enhance Accenture's third-party risk management processes and introduce innovative approaches and solutions to optimize efficiency and effectiveness. Support the company's commitment to protect the integrity and confidentiality of systems and data. Conduct comprehensive third-party risk assessments to evaluate the compliance and risk posture of vendors and partners. Execute risk-based audits and communicate specific elements of the risk-based work plan as per stakeholder requirements. Perform audit projects in accordance with Accenture s audit methodology, focusing on IT global processes and controls, and computerized information systems. Plan and develop audit work programs, execute audit test procedures, identify recommendations for continuous improvement, communicate results, and follow up on reported issues. Prepare audit reports and work papers to ensure adequate documentation exists to support the completed audit and conclusions. Verify the adequacy of IT operating procedures through systematic audits. Conduct IT integrated audits with operational, compliance, financial, and investigative audit teams. Support Information Security, Business Continuity, and GDPR initiatives. Contribute to internal business growth and development. Qualification Any Graduation
Posted 1 month ago
5 - 10 years
13 - 17 Lacs
Jaipur
Work from Office
Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : One Identity Manager Good to have skills : NA Minimum 5 year(s) of experience is required Educational Qualification : 15 years full time education Summary :As a Security Architect, you will define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Your typical day will involve collaborating with various teams to assess security needs, documenting security controls, and transitioning to cloud security-managed operations. You will engage in discussions to refine security strategies and ensure compliance with industry standards, all while adapting to the evolving landscape of cloud technologies and security threats. Roles & Responsibilities: Expected to be an SME. Collaborate and manage the team to perform. Responsible for team decisions. Engage with multiple teams and contribute on key decisions. Provide solutions to problems for their immediate team and across multiple teams. Facilitate training sessions to enhance team knowledge and skills. Monitor and evaluate the effectiveness of implemented security measures. Professional & Technical Skills: Must To Have Skills: Proficiency in One Identity Manager. Strong understanding of cloud security principles and practices. Experience with identity and access management solutions. Familiarity with compliance frameworks such as ISO 27001 or NIST. Ability to analyze security incidents and develop mitigation strategies. Additional Information: The candidate should have minimum 5 years of experience in One Identity Manager. This position is based at our Jaipur office. A 15 years full time education is required. Qualification 15 years full time education
Posted 1 month ago
4 - 9 years
0 - 2 Lacs
Gurugram
Work from Office
Job Title: Cloud Security Department: Technology Consulting Location: Gurgaon Overview: We are seeking a highly skilled and experienced Cloud Security Manager to join our team. The ideal candidate will be responsible for overseeing the development, implementation, and maintenance of cloud security measures to protect the organization's cloud-based assets. The Cloud Security Manager will work closely with various teams to ensure compliance with industry standards and regulatory requirements. Key Responsibilities: Develop and implement cloud security policies and procedures to protect the organization's cloud-based assets Monitor and analyze security vulnerabilities and threats in the cloud environment Conduct regular security assessments and audits to identify and address potential risks Collaborate with cross-functional teams to ensure compliance with industry standards and regulatory requirements Manage incident response and resolution processes related to cloud security incidents Stay up-to-date on the latest security trends and technologies to enhance the organization's cloud security posture Qualifications: Bachelor's degree in Computer Science, Information Technology, or related field Certified Network Associate in Cloud Security (CNAPS) certification Certified Security Professional Manager (CSPM) certification Minimum of X years of experience in cloud security management in a large enterprise environment Strong knowledge of cloud security best practices, tools, and technologies Excellent communication and interpersonal skills Ability to work effectively in a fast-paced and dynamic environment
Posted 1 month ago
10 - 15 years
30 - 40 Lacs
Noida, Gurugram, Delhi / NCR
Work from Office
Ticket Vending Machines,Automated Fare Collection System,E-2-E application design based on Preliminary Design & Pre-final Design documents,internal & external system interfaces PDUs,embedded systems,hardware & software protocols design & development
Posted 1 month ago
2 - 5 years
6 - 8 Lacs
Mumbai, Pune, Bengaluru
Work from Office
1.Conduct information security management reviews and information security management system (ISMS) assessments 2.Must have knowledge of various compliances like ISO 27001, SOC 2, PCI DSS, GDPR etc. 3.Ensure technical implementation and business processes are aligned 4.Lead the design, implementation, operation and maintenance security management systems 4.Participate in the creation, review and update of information security policies 5.Provide complex technical advice, recommendations and consultancy on networks, infrastructure, products and services supplied 6.Provide or assist with implementation documentation Ongoing project management 7. Must be ISO 27001 LA certified.
Posted 1 month ago
6 - 11 years
13 - 23 Lacs
Thane, Navi Mumbai, Mumbai (All Areas)
Work from Office
Greetings from Digifocal...!!! Please find the below job description: Strong expertise in cybersecurity, networks, servers, and virtualization: Experience in firewall and antivirus implementation SOC2 & PCI DSS compliance knowledge is a must IT Infrastructure design, disaster recovery, and hybrid solutions Incident management and BCP/DR strategies Strong communication and leadership skills Key Responsibilities: IT Infrastructure Management Maintain and secure IT systems, ensuring high availability. Cyber & Information Security Implement firewalls, antivirus, and security measures to protect data. Compliance & Licensing Manage SOC2, PCI DSS , and software licensing. Incident & Risk Management Handle end-to-end incident response and BCP/DR practices. IT Project & Budget Management Plan and execute IT projects while managing budgets. Cloud & Virtualization Technologies – Work with AWS, Office 365, MS Hyper-V, VMware . Server & Storage Management – Ensure efficiency of Windows Servers, SAN/NAS storage . IT Vendor & Service Management – Collaborate with service providers for smooth IT operations. Process Implementation – Improve IT workflows with ITIL processes (Change, Incident Management) . Training & Documentation – Conduct information security training and maintain IT documentation. Kindly note, this will be Night Shift Opportunity. Interested candidates kindly share their resumes on shikha@digifocal.in
Posted 1 month ago
5 - 8 years
10 - 13 Lacs
Bengaluru
Work from Office
Looking for an Information Security Consultant with experience in IT audits, SOX, ISO 27001, NIST, PCI DSS, risk assessments, and compliance. Must handle audits, GAP assessments, client meetings, and risk advisory. Required Candidate profile Candidate should have Min. 5 years of experience in IT audits, SOX, ISO 27001, NIST, PCI DSS, and risk assessments. Good communication, client handling, and report writing skills needed.
Posted 1 month ago
7 - 12 years
25 - 35 Lacs
Noida, Chennai, Bengaluru
Hybrid
GRC professional with good understanding of industry frameworks and standards 2. In-depth experience on Third-Party Risk Management a. Evaluating third party's cybersecurity control and ensuring they are in compliance with organizations standards and industry best practices b. Track and monitor the status of each due diligence review and communicate the status with management and key stakeholders on a regular basis c. Articulate risks and potential options for remediation or compensating controls d. Understand inherent risk assessment e. Perform new and recurring third party security risk assessments, develop mitigation plans, and work with internal stakeholders to assign remediation tracking responsibility 3. Strong business and communication skills 4. Experience in driving meetings with stakeholders 5. Provide advisory and consulting to client on new trends and challenges in enterprise risk management area 6. Experience in design and development of information security policies, standards, and guidelines 7. Experience on SIG (shared assessments), ISO 27001, NIST framework, SOC 1, SOC2, ISO 27001 and HIPAA 8. Lead and drive meeting with top management 9. Design / modify Contract security language / security clauses 10. Co-ordinate and negotiate security clauses with Procurement team and Supplier 11. Experience on GRC platforms 12. Client interface for understanding the IT Governance, IT Risk & Compliance Management Controls as applicable to Infrastructure operations 13. Well versed and hands-on experience for establishing processes, controls and audits of compliances like HIPAA, CFR, PCI DSS & SOX ITGCs. 14. Documentation of as-is IT & Risk management Controls as they are currently being executed in client environment and ensuring that the same controls are followed and implemented in service delivery operations 15. Work with the client & technical teams for change request on any risk or control implementation as well as governance process 16. Participate in internal as well as external regulatory as well as IT security audits. Understand IT Risks and define audit & governance mechanisms for assets, processes & physical security
Posted 1 month ago
8 - 13 years
15 - 20 Lacs
Goregaon, Mumbai (All Areas)
Work from Office
Role & Responsibilities: Key highlights of the role are listed below (purely indicative and not limiting):This position would include the mentioned set of responsibilities but not limited to: 1. Audit Planning & Execution: Conduct risk assessments to identify key areas of risk exposure and develop annual audit plans based on identified risks and priorities. Plan and Co-ordinate for execution of internal audits across various functions and business units at different locations. Ensure completion of audit as per the Audit Plan and Schedule Conduct walkthroughs, process reviews, and control testing to assess design and operating effectiveness. Ensure adherence to RBI guidelines, PCI-DSS compliance, and other applicable regulations. 2. Risk Management & Control Evaluation: Assess the adequacy and effectiveness of internal controls, policies, and procedures. Recommend improvements to strengthen risk management, fraud detection, and loss prevention mechanisms. Evaluate credit risk models, underwriting policies, fraud management frameworks etc. Perform data analytics-driven risk assessments to identify anomalies and control gaps. 3. Reporting & Compliance: Prepare audit reports based on audit findings, and risk assessments Ensure timely follow-ups on audit recommendations and track corrective actions. Monitor compliance with regulatory frameworks (RBI, SEBI, PCI-DSS, AML/KYC, etc.). Collaborate with external auditors and regulatory bodies during inspections. 4. Stakeholder Engagement & Advisory: Act as a trusted advisor to business units on risk mitigation and process optimization. Partner with risk and compliance teams to enhance governance, risk, and compliance (GRC) frameworks. Work with IT / Information security and fraud management teams to enhance cyber risk resilience and digital payment security. Conduct stakeholder feedback surveys. 5. Continuous Improvement & Technology Integration: Leverage AI, machine learning, data analytics and automation tools for predictive risk analytics. Promote the use of data-driven audit techniques Keep up with industry trends, regulatory changes, and best practices in credit card risk management. Applicants should possess the following attributes: Strong understanding of credit card lifecycle operations, underwriting, collections, chargebacks, fraud controls, finance, risk management etc. Strong understanding of audit principles, methodology, tools, processes and standards Experience of conducting Risk Based Internal Audit Strong understanding of audit principles, methodology, tools, processes and standards (e.g., risk assessments, planning, testing, reporting and continuous monitoring; COSO, IIA standards) Knowledge of RBI regulations, AML/KYC guidelines, PCI-DSS compliance. Strong understanding of regulatory landscape in India along with hands on experience of working on regulatory matters as outlined by key regulators like RBI and SEBI Excellent analytical, problem-solving, and stakeholder management skills. Ability to present audit findings effectively to related stakeholders Ability to coach and mentor others and create an inclusive work environment for team In-depth understanding of financial instruments including equity, fixed income, derivatives, structure products and other financial products and services
Posted 1 month ago
9 - 14 years
32 - 37 Lacs
Pune
Work from Office
About The Role : Job Title Vendor Risk Manager AVP LocationPune, India Role Description Vendor Management is responsible for the service relationship with a vendor on a transactional level and for transactional vendor related support tasks. Work includes Managing or performing strategic sourcing work to manage risk and optimize the value/resilience of materials/services sourcing including Establishing supplier relationship management processes and continuous improvement goals/programs Negotiating contracts and coordinating supplier integration plans with internal clients Monitoring market dynamics that impact materials/services availability and/or pricing Partnering with internal clients to identify sourcing needs, develop buyer/market profiles, identify marketplace trends, and define acceptable service levels What we'll offer you As part of our flexible scheme, here are just some of the benefits that youll enjoy Best in class leave policy Gender neutral parental leaves 100% reimbursement under childcare assistance benefit (gender neutral) Sponsorship for Industry relevant certifications and education Employee Assistance Program for you and your family members Comprehensive Hospitalization Insurance for you and your dependents Accident and Term life Insurance Complementary Health screening for 35 yrs. and above Y our key responsibilities Vendor Risk Management (VRM) is the framework/process for identifying and managing the risks arising from working with third-party vendors (internal and external). All vendor relationships and transactions are assessed and those carrying higher inherent risks are subject to a more granular assessment. SO (Service Owner) role is responsible for owning the service and providing comprehensive details, responding to tasks in the VRM process when necessary. Your role Taking end-to-end ownership of each assigned Vendor Risk Management (VRM) Engagement Requests for an engagement as SO. Follow-up with Vendors point(s) of contact for responding to all Control questions raised during VRM process for an engagement. Escalations to be triggered as required. Attending all trainings and workshops defined as mandatory by internal Third-Party Risk Management (TPRM) teams. Keeping yourself familiarized and updated on all latest Policies and Procedures published by the various Risk Management Functions within Deutsche Bank. Keeping yourself familiarized and updated on control requirements of the latest Security Control for Third Parties (SCTP 4.0) and explain the same to vendors to ensure that appropriate evidence is shared by the vendors, which satisfy the Control requirement. Ensuring appropriate due diligence before Third Party Management (TPM) review initiation and familiarity with Risk Type Controller (RTC) requirements in advance Providing comprehensive and transparent details about the owned Engagement Request in the TPM platform in a timely manner Ensuring that the data provided about the owned Engagement Request are kept up-to date, in line with the TPM Key Operating Documents Performing VRM Process tasks when prompted by TPM and/or RTCs Notifying the relevant RTCs whenever gaps are closed, deadlines cannot be met or full mitigation is not possible, Remediating gaps identified for the Engagement Request and implementing mitigation plans, Reporting gaps by raising Self-Identified Issues (SII) in an engagement and follow-up for closure/mitigation on a timely basis, in line with the remediation plans shared, Addressing unmitigated risks/gaps in accordance with the Operational Risk Management Policy, TPRM Policy, TPRM Procedure and TPM Key Operating Documents, Ensuring the service does not commence before the VRM review is completed, Ensuring that no contract is signed, or service is delivered to any Deutsche Bank Legal Entity for which Compliance deemed the service prohibited, Ensuring adherence to contractual obligations by Vendor Ensuring compliance to Regulatory guidelines Timely submission of accurate data to Regulators. Liaising with Divisional Vendor Management Office (DVMO) resources for closing any open points related to the engagement requests, Ensuring all strategies and plans eg. Termination Exit Plans, Termination Exit Strategies, etc. related to an engagement are documented, agreed between the relevant stakeholders, and reviewed / updated on defined intervals. Ensuring that Monthly, Quarterly Governance meetings with appropriate stakeholders are conducted and the details documented in line with the SDM requirements, Ensuring monthly feedback / review is completed for all engagements in scope and the details are documented in the designated portals in line with relevant policies. Ensuring annual audits are budgeted, planned, and conducted for the identified vendors and follow-up to ensure all open findings are remediated by vendor. Your skills and experience Excellent skills and experience / technical knowledge in handling data/information security audits in Banking / Financial environments Minimum 10 years Knowledge and experience with handling / responding to controls around IT Security audits, Financial Audits eg. SOX IT (SOC) audits, ISO 27001:2022, PCI-DSS, etc. Working with multiple teams to remediate open findings identified during internal / external audits including regulatory audits, IT Security audits, etc. Familiar with security requirements for Banking applications and environments, A great team player who is comfortable in working and coordinating with diverse people from both internal as well as vendor teams, Excellent communication and mentoring skills, Experience with distributed, multi-locations teams, Able to inspire and motivate people and multi-disciplinary, self-organized teams, Any Certifications in areas of Information Security or Vendor Management is a plus, Professional level of English is mandatory. How we'll support you Training and development to help you excel in your career. Coaching and support from experts in your team A culture of continuous learning to aid progression. A range of flexible benefits that you can tailor to suit your needs. About us and our teams Please visit our company website for further information: https://www.db.com/company/company.htm We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively. Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group. We welcome applications from all people and promote a positive, fair and inclusive work environment.
Posted 1 month ago
3 - 4 years
4 - 9 Lacs
Bengaluru
Work from Office
We are seeking a detail-oriented and analytical GRC Analyst to join our team in Bangalore, India. As a GRC Analyst, you will play a crucial role in ensuring our organizations compliance with regulatory requirements, managing risks, and maintaining effective governance practices. Conduct comprehensive risk assessments and develop mitigation strategies to address identified risks Monitor and evaluate the effectiveness of internal controls and compliance processes Assist in the development and implementation of GRC policies, procedures, and guidelines Perform regular audits to ensure compliance with relevant regulations and industry standards Analyze data and prepare detailed reports on GRC-related matters for senior management Collaborate with cross-functional teams to implement and maintain GRC software tools Stay up-to-date with evolving regulatory requirements and industry best practices Provide training and guidance to employees on GRC-related topics Support the development and maintenance of business continuity and disaster recovery plans Bachelors degree in Business Administration, Information Technology, or a related field 3-4 years of experience in GRC, audit, or related fields Strong knowledge of GRC frameworks such as PCI-DSS ISO 27001:2022 & 9001:2015, SOC2 Type II CEH (Certified Ethical Hacker) AZ-500 Microsoft Azure Security Technoligies/Cloud Security Certifications with hands on experience Proficiency in risk assessment and management techniques Familiarity with compliance regulations including GDPR, SOX, and HIPAA Excellent data analysis and reporting skills Proficiency in GRC software tools Strong communication and presentation skills Detail-oriented with a high level of accuracy and organizational skills Ability to work independently and as part of a team in a fast-paced environment Relevant certifications such as LA/LI 27001:2013/22, CPISI Understanding of industry-specific regulations and best practices
Posted 1 month ago
10 - 20 years
1 - 6 Lacs
Bengaluru
Work from Office
SUMMARY Job Role: Senior Product Owner with Security Expertise Location: PAN INDIA Years of Experience : 10+ Years Any project-specific Prerequisite skills (Must have) Seeking a Senior Product Owner with a strong background in security, requiring over 6 years of experience as a Product Owner and a total of 10+ years’ experience. Detailed JD * Collaborate with cross-functional teams to understand client and team requirements Communicate project status and challenges with team members Engage with external stakeholders and Product Owners to analyze and incorporate feedback into the service/function provided Prioritize product backlog items based on business value, time required, and creation order Evaluate opportunities and potential risks associated with suggestions Advocate the benefits of recommendations and address any uncertainties Support staff and teams in implementing changes and resolving issues Draft user stories based on requirements Coordinate with developers to ensure clear understanding of project requirements Assist development team in understanding business aspects Develop and maintain deep understanding of security architecture and secure software development practices Implement security solutions, including data security, compliance, and incident response Utilize security frameworks and tools such as OAuth, SAML, OpenID Connect, JWT, and LDAP Work with cloud security services like AWS IAM, Azure AD, and Google Cloud IAM, with preference for AWS experience, including AWS Cognito and AVP Implement methodologies and tools like DevSecOps, CICD, SRE, and security testing tools (e.g. OWASP ZAP, Burp Suite, SonarQube) Ensure compliance with security standards and regulations (e.g. GDPR, HIPAA, PCIDSS) Requirements Requirements: Proven experience as a Product Owner with a focus on security Strong understanding of security architecture and secure software development practices Experience with cloud security services, such as AWS IAM, Azure AD, and Google Cloud IAM Familiarity with security frameworks and tools, including OAuth, SAML, OpenID Connect, JWT, and LDAP Knowledge of security compliance standards and regulations, such as GDPR, HIPAA, and PCIDSS Experience with DevSecOps, CICD, SRE, and security testing tools (e.g. OWASP ZAP, Burp Suite, SonarQube)
Posted 1 month ago
1 - 5 years
2 - 5 Lacs
Hyderabad
Work from Office
About the role: The global Identity Access Management team is passionately serving our stakeholders while evolving best practices. As an Identity Access Analyst , you have a pivotal operational role to provide and deprovision system access. You have an equally crucial role to partner collectively with stakeholders to mature, streamline, and automate Identity and Access Management procedures for Blackbaud. What you’ll do Ensure appropriate Control through timely removal of unnecessary or inappropriate system access? Expediently provision approved access, often utilizing evolving Role Based Access Controls (RBAC), for Blackbaud systems to prevent excessive permissions and rights. ?? Proactively expand approved RBAC roles through analysis, recommendation and adoption/rollout. Analyze and resolve access issues, coordinating with system owners or technical support resources as necessary. Participate in ongoing audits and assessments, and assist with implementation of audit or compliance recommendations? Develop and maintain detailed documentation on standard operating procedures, system configurations, and technical settings for internal team use, end user support? Identify , evaluate and recommend opportunities to eliminate, streamline, and automate access management practices. Partner with colleagues including application owners, cloud engineers, cyber security SMEs, etc. to effectively execute improvements based on expected value. Generate reports to perform in-depth analysis and data collection for issues associated with IAM? What you’ll bring 2 years of experience in Identity or Access Management?? Tireless adherence and attention to appropriate IT general computing controls? Ability to understand, work with and where appropriate leverage various technologies including PowerShell , ServiceNow, SailPoint's Identity-Now, Active Directory, EntraID , Salesforce, Workday, etc. Practical experience with SCA, ITIL, COBIT, NIST and/or other security and control frameworks? Stay up to date on everything Blackbaud, follow us on Linkedin, X, Instagram, Facebook and YouTube ? Blackbaud is a digital-first company which embraces a flexible remote or hybrid work culture. Blackbaud supports hiring and career development for all roles from the location you are in today! Blackbaud is proud to be an equal opportunity employer and is committed to maintaining an inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.
Posted 1 month ago
4 - 6 years
6 - 8 Lacs
Gurugram
Work from Office
Job Description/What You Will Do: Analyze technology (IT and Cybersecurity) implications for active M&A transactions. Review client investment thesis, company profile and information concerning the business technology environment including but not limited to business applications, IT infrastructure, cybersecurity controls, and privacy related regulatory compliance requirements. Research niche technologies, applicable regulatory obligations and latest technology trends to guide analysis. Participate in discussions with company executives to understand business processes, approach to leveraging technology and strategy to build resiliency against cybersecurity threats. Analyze commercial off the shelf and/or custom developed applications used by a business for sufficiency (e.g., license counts), scalability (e.g., version, implementation model), and maintainability (e.g., support model). Analyze a company's IT infrastructure to determine adequacy of hosting model, hardware inventory, network architecture and business continuity procedures. Analyse technology vendor contracts and compute IT spend through the review of contracts and other financial documents provided by the Company. Analyze the company's cybersecurity maturity through review of cybersecurity governance program/procedures, exposure to regulatory compliance requirements and preventative technical controls. Develop workbooks and reports to capture diligence observations/analysis. Manage and develop members of the RSM USI team. Who We Are Looking For: Ability to conceptualize and summarize key findings in a clear and meaningful way with expertise in drafting critical sections of the technology DD report. Expertise and working knowledge of infrastructure management, network architecture, virtualization, application and data hosting architectures (data center, on-premise, public cloud), and business continuity/disaster recovery (BCDR) best practices. Knowledge of and experience with key IT frameworks (e.g. CMMI, ITIL, ISO 27000, SSAE-18 SOC reporting, NIST Cybersecurity Framework). Knowledge of and experience with key cybersecurity frameworks (e.g. COBIT, ISO 27001, NIST). Exposure to various sectors such as financial services, healthcare, life sciences, power and utility, energy, retail and hospitality, business services and technology. An experience across a wide spectrum of IT and security pillars including IT Strategy, Infrastructure, Business Applications, Cybersecurity, Spend Analysis, etc. Highly proficient with Microsoft office Suite (e.g., PowerPoint, Excel, Word, Visio) Strong skills in critical thinking, problem solving, and process improvement. Excellent interpersonal and communication skills in order to interact effectively with internal team members and external clients of the firm. Demonstrates willingness to invest time in cross-time zone communication with U.S. based teams. Ability to be a self-starter and drive successful client delivery. Able to manage deadlines and take ownership of getting the job done in a timely manner. Evaluated as an exceptional performer in current position. Development Opportunity/What's in It for You: Opportunity to interface with US based private equity and executive level leadership. Develop expertise in technology related M&A disciplines. Grow a strategic mindset and develop executive level perspective on investment towards operational technology. Experience M&A across a variety of industries and option to develop specific industry expertise. Gain an understanding of the approach towards post-acquisition value creation, integration, separation and risk remediation. Minimum Qualifications: Academic Qualification: B.Tech. and MBA from leading technology/business schools. Relevant experience of 4-7 years at a Big 4 or equivalent Advisory Services practice. Knowledge of Microsoft powered AI products such as Microsoft CoPilot or any other GenAI tools is preferred. Preferred Qualifications: Deal experience with onshore team including data room management, document request list preparation, management meeting preparation, workbook analysis, quality of earnings, due diligence reports, client calls and engagement team calls. Experience with post-acquisition/carve-out integration and separation related engagements. Preferred industry experience in one or more of the following: manufacturing, distribution, consumer products, business services, healthcare, financial services, business services, or technology. Knowledge of US based regulatory and compliance frameworks such as FFIEC, NERC CIP, PCI DSS, HIPAA, GLBA, and HITECH is a plus. ERP or supply chain application implementation experience; functional expertise in IT and supporting front/back-office operations preferred IT and cyber related certifications (CISSP, CISM, HITECH, PCI DSS QSA, CEH, Azure, AWS)
Posted 1 month ago
3 - 6 years
8 - 9 Lacs
Navi Mumbai, Mumbai
Work from Office
ANZEN Technologies Private Limited. stands as an unparalleled powerhouse, empowering organizations across industries with our visionary services, cutting-edge solutions, and ground-breaking services in the realm of Cyber Security, IT Governance, Risk Management, and Compliance. As your trusted partner, we offer a comprehensive suite of End-to-End security services and consultancy, tailored to safeguard critical infrastructure installations, elevate the standards of BFSI, eCommerce, IT/ITES, Pharmaceuticals, and an array of other sectors. Position : Senior Associate Consultant Key Responsibilities: GRC Strategy and Planning: Develop and implement comprehensive GRC strategies, policies, and procedures aligned with organizational goals and objectives. Define and prioritize GRC initiatives based on risk assessments, regulatory requirements, and industry best practices. Continuously evaluate and update GRC frameworks to adapt to evolving threats and compliance landscapes. Risk Management: Conduct risk assessments to identify, analyze, and prioritize risks across the organization. Develop risk mitigation strategies and controls to address identified risks effectively. Monitor and report on risk exposure and mitigation efforts to senior management and stakeholders. Compliance Management: Ensure compliance with relevant laws, regulations, and industry standards, such as GDPR, HIPAA, PCI DSS, etc. Monitor changes in regulatory requirements (SEBI, RBI, IRDAI etc) and assess their impact on the organization's compliance posture. Coordinate compliance audits, assessments, and certifications, and remediate any identified issues or deficiencies. Audit Management: Plan, coordinate, and oversee internal and external audit activities, including IT audits, compliance audits, and third-party audits. Develop audit plans, programs, and testing procedures to assess the effectiveness of controls and compliance with policies and regulations. Review audit findings, assess control deficiencies, and collaborate with stakeholders to develop and implement remediation plans. Monitor and track the progress of audit remediation efforts and report on the status to senior management and audit committees. Policy Development and Enforcement: Develop, review, and update information security policies, standards, and guidelines in alignment with regulatory requirements and industry best practices. Establish mechanisms for policy enforcement and monitor adherence to policies across the organization. Cross-Functional Collaboration: Collaborate with internal stakeholders, including IT, legal, finance, and operations, to integrate GRC principles into business processes and initiatives. Provide guidance and support to business units on GRC-related matters, including risk assessments, compliance requirements, and controls implementation. Training and Awareness: Develop and deliver GRC training programs and awareness campaigns to educate employees on their roles and responsibilities in maintaining compliance and managing risks. Foster a culture of compliance and risk awareness throughout the organization. Qualifications and Skills: Bachelor's degree in Information Security, Risk Management, Business Administration, or related field. Masters degree or relevant certifications (e.g., CISA, CISSP, CRISC, CISM) preferred. Minimum of 5 years of experience in governance, risk, and compliance roles, with a focus on information security and IT risk management, including audit management experience. Strong understanding of regulatory requirements and industry standards related to information security and data privacy (e.g., GDPR, HIPAA, ISO 27001). Proficiency in audit methodologies, risk assessment frameworks, compliance frameworks, and control frameworks (e.g., NIST Cybersecurity Framework, COBIT, ITIL). Excellent analytical, problem-solving, and decision-making skills. Effective communication and interpersonal skills, with the ability to collaborate with diverse stakeholders and influence change. Proven track record of leading GRC initiatives, conducting audits, and driving process improvements. Ability to work independently and manage multiple priorities in a fast-paced environment. Office Address : ANZEN Technologies Private Limited Akshar Business Park, H - 3025, 3rd Floor, Plot No. 3, Sector-25, Vashi, Navi Mumbai 400703 https://anzentech.com Immediate Joiner may apply
Posted 1 month ago
Upload Resume
Drag or click to upload
Your data is secure with us, protected by advanced encryption.
Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.
We have sent an OTP to your contact. Please enter it below to verify.
Accenture
20312 Jobs | Dublin
Wipro
11977 Jobs | Bengaluru
EY
8165 Jobs | London
Accenture in India
6667 Jobs | Dublin 2
Uplers
6464 Jobs | Ahmedabad
Amazon
6352 Jobs | Seattle,WA
Oracle
5993 Jobs | Redwood City
IBM
5803 Jobs | Armonk
Capgemini
3897 Jobs | Paris,France
Tata Consultancy Services
3776 Jobs | Thane