Cyber Risk Advisor
6 months ago
**About Us**
**Role Summary**
- As a Cyber Risk Advisor I, you will work proactively in assessing and prescribing remediation actions relating to cyber risk exposures within Sophos customers’ environments. Chief among your responsibilities will be conducting comprehensive vulnerability assessments, threat landscape analysis, and developing risk-based remediation plans with the goal of reducing customers’ attack surface and mitigating their exposure to cyber threats.
**What you will do**:
- Review recurring assessments for enterprise assets, report on discovered vulnerabilities and exposures, and guide customers’ mitigation strategies, tracking remediation against service objectives
- Perform research and analysis of vulnerability assessments; contextualize and prioritize results so as to guide customers’ remediation efforts
- Utilize threat-based, intelligence-led approach to vulnerability, threat and exposure management to reduce customers’ cyber-risk
- Assist in the development of risk-based remediation plans with proposed solutions for identified vulnerabilities and exposures
- Understand how business functions operate and how industry trends impact customers’ business objectives
- Lead Risk Review sessions where you will deliver key messages with clarity, confidence, and poise to instill confidence in customers
- Develop impactful reports and presentations that support the achievement of engagement goals and objectives
- Build and nurture positive working relationships with customers with the intention of exceeding customer expectations and service delivery objectives
- Collaborate with stakeholders to prioritize vulnerability and exposure remediation and address potential attack vectors
- Stay informed on the current threat landscape to maintain current knowledge of vulnerabilities and exploitation tactics and techniques; advise customers on security countermeasures accordingly
- Collaborate with cross-functional teams to design and implement advanced vulnerability and managed risk dashboards
- Liaise with customer compliance teams to understand unique compliance requirements of Sophos Managed Risk customers
- Engage in continuous, self-driven learning to stay current on trends, strategies, and technologies in the Vulnerability, Threat and Exposure Management spaces
- Introduce and evolve practices, templates, policies, tools, and partnerships to expand upon and mature service offering capabilities
- Identify opportunities for efficiencies in process and innovative approaches to completing scope of work
- Maintain strong working relationships and credibility amongst groups within the Sophos Managed Services organization
**What you will bring**:
- Bachelor's in information technology, Computer Science or a related field; or relevant commensurate work experience
- Exceptional writing, documentation, and presentation skills to effectively communicate findings and remediation strategies to customers/stakeholders
- 3-5 years of experience in conducting vulnerability assessments, attack surface management preferably in both IT and OT (Operational Technology) environments
- Must be able to thrive within a team environment as well as on an individual basis
- Advanced understanding of risk analytics/modeling and vulnerability assessment
- Proficient in utilizing vulnerability scanning tools, e.g., Tenable
- In-depth understanding of vulnerability classification and scoring methodologies (CVSS, CVE, CWE, NVD), as well as exploitability likelihood models such as EPSS, CISA KEV, Tenable VPR
- Familiarity with compliance frameworks including, but not limited to: ISO27001, SOC2, SOX, GDPR, HIPPA, PCI-DSS, and State/FedRAMP
- Knowledgeable about cybersecurity best practices and frameworks, including SANS Top 20 Critical Security Controls, NIST Cybersecurity Framework, Cyber Kill Chain, MITRE ATT&CK Framework, CIS Controls, and OWASP Top 10
- Ability to prioritize impactful vulnerabilities and minimize noise often associated with vulnerability tools
- Foster a culture of continuous learning by organizing knowledge-sharing sessions and workshops, while acting as mentor to junior team members by providing guidance on best practices, industry insights and professional development thereby equipping them with the skills needed to excel in their roles
- Skilled in managing time independently while juggling multiple projects concurrently in a fast-paced environment
- Superior customer service skills
LI- Remote
- #B2
**Ready to Join Us?**
**What's Great About Sophos?**
- Sophos operates a remote-first working model, making remote work the primary option for most employees. However, some roles may necessitate a hybrid approach. Please refer to the location details in our job postings for further information.
- Our people - we innovate and create, all of which are accompanied by a great sense of fun and team spirit
- Employee-led diversity and inclusion networks that build community and provide education and
-
Associate, Cyber Risk
6 months ago
India Kroll Full timeIn a world of disruption and increasingly complex business challenges, our professionals bring truth into focus with the Kroll Lens. Our sharp analytical skills, paired with the latest technology, allow us to give our clients clarity—not just answers—in all areas of business. We embrace diverse backgrounds and global perspectives, and we cultivate...
-
BluOcean Cyber | SaaS Security
1 week ago
india BluOcean Cyber Full timeCompany DescriptionBluOcean Cyber is a cybersecurity and privacy firm dedicated to ensuring trust and security in technology. We strive to elevate security to the strategy table for our clients, one project at a time.About the JobAre you ready to transform the cyber landscape and elevate your career? Join BluOcean's SaaS Cyber Security team, a dynamic force...
-
BluOcean Cyber | SaaS Security
3 days ago
india BluOcean Cyber Full timeCompany Description BluOcean Cyber is a cybersecurity and privacy firm dedicated to ensuring trust and security in technology. We strive to elevate security to the strategy table for our clients, one project at a time. About the Job Are you ready to transform the cyber landscape and elevate your career? Join BluOcean's SaaS Cyber Security team, a dynamic...
-
BluOcean Cyber | Product Manager
7 days ago
india BluOcean Cyber Full timeBluOcean is a dynamic technology company focused on building innovative SaaS products in the Cyber Security domain. We are seeking a Product Manager to lead a multidisciplinary team, work with our clients, business stakeholders and cyber security leaders to shape strategic product vision, key use cases and market needs. As a Product Manager you should have...
-
BluOcean Cyber | Product Manager
6 days ago
india BluOcean Cyber Full timeBluOcean is a dynamic technology company focused on building innovative SaaS products in the Cyber Security domain. We are seeking a Product Manager to lead a multidisciplinary team, work with our clients, business stakeholders and cyber security leaders to shape strategic product vision, key use cases and market needs. As a Product Manager you should have...
-
India BluOcean Cyber Full timeBluOcean Cyber is a pioneering technology company specializing in innovative SaaS products for the Cyber Security domain. We are seeking an experienced Strategic Product Lead to spearhead our multidisciplinary team, collaborate with clients, business stakeholders, and cyber security experts to shape our strategic product vision, key use cases, and market...
-
india BluOcean Cyber Full timeSaaS Security Architect - Senior Consultant/ experienced ConsultantAbout the JobAre you ready to transform the cyber landscape and elevate your career? Join BluOcean's SaaS Cyber Security team, a dynamic force shaping the future of security across the digital domain. As part of our elite team, you'll drive innovation and safeguard critical systems in a world...
-
india BluOcean Cyber Full timeSaaS Security Architect - Senior Consultant/ experienced Consultant About the Job Are you ready to transform the cyber landscape and elevate your career? Join BluOcean's SaaS Cyber Security team, a dynamic force shaping the future of security across the digital domain. As part of our elite team, you'll drive innovation and safeguard critical systems in a...
-
India Evernorth Health Services Full timeAbout Evernorth Health ServicesWe are a leading provider of pharmacy, care, and benefits solutions to improve health and increase vitality. Our team is dedicated to creating innovative solutions that make the prediction, prevention, and treatment of illness and disease more accessible to millions of people.Job Title: Information Protection Senior AdvisorThis...
-
Technology Risk Specialist
3 days ago
India Evoke HR Solutions Pvt. Ltd. Full timeJob DescriptionWe are seeking a Technology Risk Specialist with expertise in Cyber Security to join our team at Evoke HR Solutions Pvt. Ltd.Key Responsibilities:Oversee the Third Party Risk Management program, ensuring effective management of information and cyber security risks.Ensure compliance with the IRDAI's Third Party Risk Management framework.Design...
-
Cyber Risk Management Specialist
1 week ago
India VISO TRUST Full timeAbout VISO TRUST: As a leading SaaS third-party cyber risk management platform, we deliver security intelligence to empower modern companies to make informed risk decisions at speed.Assessing third-party relationships poses a complex and labor-intensive process that slows business and frustrates stakeholders. Our Solution enables security teams to mitigate...
-
BluOcean Cyber | Lead Engineer
7 days ago
india BluOcean Cyber Full timeSummaryBluOcean is a dynamic technology company focused on building innovative, large-scale SaaS products. We are seeking a Lead Engineer to play a critical role in designing, architecting, and developing innovative SaaS applications on Microsoft Power App Platform, ensuring they meet the highest standards for performance, scalability, and security.As a Lead...
-
BluOcean Cyber | Lead Engineer
6 days ago
india BluOcean Cyber Full timeSummary BluOcean is a dynamic technology company focused on building innovative, large-scale SaaS products. We are seeking a Lead Engineer to play a critical role in designing, architecting, and developing innovative SaaS applications on Microsoft Power App Platform, ensuring they meet the highest standards for performance, scalability, and security. As a...
-
Cyber Security Training Instructor
2 weeks ago
India Better Cyber Career Full timeBetter Cyber Career">We are seeking an experienced and knowledgeable CompTIA Security+ Trainer to join our team.Estimated Salary: $90,000 - $120,000 per year, depending on experience and qualifications.Job Overview: The ideal candidate will have a strong background in IT security, a passion for teaching, and the ability to effectively convey complex concepts...
-
Marsh McLennan | Senior Manager
1 day ago
india Marsh McLennan Full timeWe are seeking a talented individual to join our Risk Consulting team at Marsh. This role will be based in Mumbai. This is a hybrid role that has a requirement of working at least three days a week in the officeSenior Manager - Cyber Risk ConsultingWe will count on you to:Support the IMEA Mumbai CRC practice, and be hands-on in delivery of the consulting...
-
Marsh McLennan | Senior Manager
1 day ago
india Marsh McLennan Full timeWe are seeking a talented individual to join our Risk Consulting team at Marsh. This role will be based in Mumbai. This is a hybrid role that has a requirement of working at least three days a week in the office Senior Manager - Cyber Risk Consulting We will count on you to: Support the IMEA Mumbai CRC practice, and be hands-on in delivery of the...
-
Marsh McLennan | Senior Manager
1 day ago
india Marsh McLennan Full timeWe are seeking a talented individual to join our Risk Consulting team at Marsh. This role will be based in Mumbai. This is a hybrid role that has a requirement of working at least three days a week in the office Senior Manager - Cyber Risk Consulting We will count on you to: Support the IMEA Mumbai CRC practice, and be hands-on in delivery of the...
-
Financial Risk Management Specialist
1 day ago
India AVA Business Consulting & Risk Management LLP Full timeAbout the CompanyAVA Business Consulting & Risk Management LLP, a leading integrated service organization in Gurugram, provides comprehensive consulting solutions to complex business and regulatory issues. With extensive industry knowledge, AVA Advisors have a growing list of returning and new clients each year.Job OverviewThis is a full-time on-site role...
-
Cyber Security Manager
3 weeks ago
India Marsh McLennan Full timeWe are seeking a talented individual to join our global Cyber Risk Consulting (CRC) practice of Marsh Advisory. This role will be based in Mumbai. This is a hybrid role that has a requirement of working at least three days a week in the office. Job Profile: Senior Manager, Cyber Risk Consulting, Marsh Marsh is a global leader in insurance broking and...
-
Cyber security analyst
4 weeks ago
India Code Factory Solution Full timeRole Description This is a part-time remote role for a Cyber Security Analyst at Code Factory Solution. The Cyber Security Analyst will be responsible for analyzing and monitoring security threats, conducting malware analysis, securing applications and networks, and applying analytical skills to protect systems and data. Job Description ...
