ManagerSr ManagerAVP

JobResponsibilities:
Demonstratesufficient understanding of business processes internal controlrisk management IT controls and related security standardspertaining to disruptive technologies stack ie Social MobileAnalytics API Cloud(SMAAC)

Carry outthe risk analysis about exposure to risk by the organisation andprovide a measurable output to take business decisions in terms ofrisk mitigation or acceptance.

These are in context of digitalbanking digital experience digital factory and new technologies andcoveringSMAAC.

Carry outendtoend risk assessment process to ensure that all identifiedrisks are managed within the organisations risk appetite and meetslegal and regulatory compliance requirements.

These are in contextof digital banking digital experience digital factory and newtechnologies and coveringSMAAC.
Maintainall the risk jobs for reporting and records via central riskdashboard.
Engageand collaborate with industry peers/institutions to develop/adoptinformation security best practices and benchmarks.
Accordingly maintainApplication (SMAA) and Cloud security design in policy /procedure.

Process documentationandcontinuousengagement with the business teams for security best practicesalignmentincontext of digital banking digital experience digital factory andnew technologies and coveringSMAAC.This is part ofBISO (Business Information Security Office) relatedtasks.

DashboardandGovernance
Preparedashboards and project the actual vs planned in all areas of theportfolio. Also cover insights gaps design improvementsetc.
Project the futurematurity and yearly guidance of assessments activities.
KeySkills
Cloudsecurity risk counter measuressound
Cloudnative tools in AWS Azure GCP etc Familiar
APIsecurity risk familiar and knows the mitigation measures & fairunderstanding about BaaS andBaaP
OWASPtop 10 attacks SANS25 DevSecops Reasonableunderstanding
Threatlandscape Familiar to threatmodelling
Intermediateknowledge of security controls (NIST standards ISO COBIT CSA threatmodellingetc.)
Strongskills using Microsoft Office Suite (Word Excel PowerpointO365).
Goodwritten collaborative and spoken communication skills.
Goodanalytical and problem solving skills
Dedication to work& goal defined which is in line with department &organization goals and complete the task & goals defined as pertimeline
CandidateProfile

Graduation:
BE BTECH BSc BCA /Post
Graduation:
M.TECH MBA MCAPhd

Certifications:
CISA CISSP CEH CCSP CEH ISO 27001 CRISC etc. would be preferred.
4 yearsexperience in the field of Information Security andtechnology.
Over 4years in information security or related technicalareas.
Exposure to AuditAssessments Vendors Solution Designing would be an advantage.
Candidatewill be responsiblefor
Digitalbanking (MSME RetailCorp)
Digitalexperience (customerjourney)
Digitalfactory (new digitalproducts)
Innovation(newtechnologies)
Riskassessment in context of Social Mobile Analytics API Cloud wrtaboveinitiatives
Application &Cloud security designsecurity
Information Security,Information SecurityRisk,Internal Control,IT Controls,Cloud Security,ApplicationSecurity,Cloud,AWS,Azure,GCP,API Security,Security Controls,ThreatModeling,CISA,CISSP,CEH,CCSP,ISO 27001,Certified in Risk andInformation Systems Control (CRISC)

---