IT Security Analyst

Description :

Requirements

Key Responsibilities :

Client Engagement :

- Serve as the primary point of contact for clients regarding OT SOC services.

- Conduct regular meetings with clients to discuss security posture, incidents, and recommendations.

- Develop and maintain strong client relationships to ensure satisfaction and trust in our services.

Security Operations :

- Monitor and analyze security events from OT environments to identify potential threats and vulnerabilities.

- Perform real-time security monitoring and incident response for OT systems.

- Utilize security information and event management (SIEM) tools to detect and respond to security incidents.

Incident Management :

- Lead and coordinate the response to OT security incidents, including investigation, containment, eradication, and recovery.

- Conduct root cause analysis and develop remediation plans to address security gaps.

- Prepare detailed incident reports and deliver findings to clients in a clear and professional manner.

Threat Intelligence and Vulnerability Management :

- Gather and analyze threat intelligence relevant to OT environments.

- Conduct vulnerability assessments and penetration testing on OT systems.

- Develop and implement strategies to mitigate identified vulnerabilities and enhance security controls.

Collaboration and Training :

- Work closely with internal teams, including IT SOC, engineering, and risk management, to ensure comprehensive security coverage.

- Provide training and guidance to clients and internal teams on OT security best practices.

- Stay updated with the latest trends, technologies, and threats in OT security.

- Develop and maintain a thorough understanding of IT controls frameworks and relevant regulations (e., SOX).

- Participate in risk assessments to identify IT control deficiencies and prioritize testing activities.

- Independently design and execute test plans for ITGCs and ITACs, utilizing a variety of testing methodologies.

- Working knowledge in one or more domains such as : Governance policies and procedures, Risk Management, Compliance, Access Control, Security Incident Response, Disaster Recovery, Business continuity management, Identity Access Review, Change Management

- Sound understanding of security technologies/techniques like Cryptography, Algorithms, Secure IT Authentication, Secure Development, Data Protection, Certificate Management Lifecycle

- Perform complex test procedures using automated tools and manual techniques, documenting the results comprehensively.

- Analyze test findings, identify control weaknesses, and recommend remediation actions.

- Collaborate with IT and business process owners to address control deficiencies and implement corrective actions.

- Experience in performing vendor security reviews covering cyber security domains

- Lead and mentor junior team members in control testing practices.

- Stay updated on emerging IT threats and control best practices.

Qualifications :

- Bachelors degree in information technology, Computer Science, or a related field (or equivalent experience).

years of experience in IT audit, IT security, or a similar role with a focus on IT control testing.

- Strong working knowledge of IT controls frameworks and IT control testing methodologies.

- Familiarity with tools like ServiceNow, Jira, or other GRC platforms.

- Experience with IT control testing tools is a must.

- Experience in assessing and providing recommendations on the feasibility of automating manual control testing processes.

- Adaptability to manage a dynamic control population and evolving client needs.

- Excellent analytical and problem-solving skills.

- Strong communication, collaboration, and leadership skills.

Location :

- Bangalore

Your role :

We expect our people to embrace and live our purpose by challenging themselves to identify issues that are most important for our clients, our people, and for society.

In addition to living our purpose, you across our organization must strive to be :

- Inspiring - Leading with integrity to build inclusion and motivation

- Committed to creating purpose - Creating a sense of vision and purpose

- Agile - Achieving high-quality results through collaboration and Team unity

- Skilled at building diverse capability - Developing diverse capabilities for the future

- Persuasive / Influencing - Persuading and influencing stakeholders

- Collaborating - Partnering to build new solutions

- Delivering value - Showing commercial acumen

- Committed to expanding business - Leveraging new business opportunities

- Analytical Acumen - Leveraging data to recommend impactful approach and solutions through the power of analysis and visualization

- Effective communication Must be well abled to have well-structured and well-articulated conversations to achieve win-win possibilities

- Engagement Management / Delivery Excellence - Effectively managing engagement(s) to ensure timely and proactive execution as well as course correction for the success of engagement(s)

- Managing change - Responding to changing environment with resilience

- Managing Quality & Risk - Delivering high quality results and mitigating risks with utmost integrity and precision

- Strategic Thinking & Problem Solving - Applying strategic mindset to solve business issues and complex problems

- Tech Savvy - Leveraging ethical technology practices to deliver high impact for clients.

- Empathetic leadership and inclusivity - creating a safe and thriving environment where everyone's valued for who they are, use empathy to understand others to adapt our behaviours and attitudes to become more inclusive