2069 Cisa Jobs - Page 7

About Us Tsaaros prime focus is on Data Privacy and Security Our team of specialist data privacy consultants, information security consultants, and penetration testers help and advise our clients to make running a secure business easier, with high efficiency Everything we do is tailored to the individual organizational requirements, aligned with their budget and resource challenges We take a pragmatic, risk-based approach to provide our clients with real-world, workable advice, guidance, and support that helps them to deal with a wide range of security and privacy-related challenges Responsibilities As a Senior Data Privacy Consultant, you will be entrusted with the following key responsibil...

About Us: Tsaaro is dedicated to Data Privacy and Security as its core focus Our team comprises specialized data privacy consultants, information security experts, and penetration testers, all working to empower our clients with seamless and highly efficient security solutions Our approach is centered around customization, understanding the unique needs of each organization, and finding solutions that align with their budget and resource constraints At Tsaaro, we adopt a pragmatic, risk-based strategy to deliver practical and effective advice By providing real-world guidance, support, and actionable recommendations, we confidently equip our clients to address a broad spectrum of security and...

About Us Tsaaros prime focus is on Data Privacy and Security Our team of specialist data privacy consultants, information security consultants, and penetration testers help and advise our clients to make running a secure business easier, with high efficiency Everything we do is tailored to the individual organizational requirements, aligned with their budget and resource challenges We take a pragmatic, risk-based approach to provide our clients with real-world, workable advice, guidance, and support that helps them to deal with a wide range of security and privacy-related challenges Responsibilities As a Data Protection Consultant, you will be entrusted with the following key responsibilitie...

About Us Tsaaros prime focus is on Data Privacy and Security Our team of specialist data privacy consultants, information security consultants, and penetration testers help and advise our clients to make running a secure business easier, with high efficiency Everything we do is tailored to the individual organizational requirements, aligned with their budget and resource challenges We take a pragmatic, risk-based approach to provide our clients with real-world, workable advice, guidance, and support that helps them to deal with a wide range of security and privacy-related challenges Responsibilities: As a Data Protection Consultant, you will be entrusted with the following key responsibiliti...

About Us: Tsaaro is dedicated to Data Privacy and Security as its core focus Our team comprises specialized data privacy consultants, information security experts, and penetration testers, all working to empower our clients with seamless and highly efficient security solutions Our approach is centered around customization, understanding the unique needs of each organization, and finding solutions that align with their budget and resource constraints At Tsaaro, we adopt a pragmatic, risk-based strategy to deliver practical and effective advice By providing real-world guidance, support, and actionable recommendations, we confidently equip our clients to address a broad spectrum of security and...

Position Purpose A primary focus for this position will be to lead audit execution covering end-to-end processes of auditable entities within the IT and Cybersecurity Inspection Generale APAC team. Responsibilities This individual will work closely with audit assignment team members to complete each phase of the audit. This will entail: assessing the sufficiency and suitability of controls to mitigate risks; and testing the operating effectiveness and sustainability of controls; and documenting walk-throughs of in-scope processes; and documenting the investigations conducted and their results; and drafting findings and associated recommendations to address identified gaps in the control envi...

Position Purpose To conduct audit work in accordance with the IG methodology and ensure high standard of deliverables To contribute to risk assessment of audit units based on knowledge obtained through assignments as well as day-to-day contact with auditees To follow through with auditee on implementation of recommendations Responsibilities Direct Responsibilities 1. Participate in the audit team assignments and special reviews (when required by regulators, business lines, or senior management) Head of Assignment - Expertise & experience in Credit Audits is required - Lead the assignment / review in accordance with BNPP Internal Audit Guidelines, International Professional Practices and esta...

Position Purpose This role will be responsible for supporting the Third-Party Technology Risk Management team in identifying and evaluating potential/ recognized risks related to Information Security, Business Continuity and Physical Security. The 3rd Party Security Risk Assessor, reporting to the Manager, Third Party Risk Management team that performs security assessments of vendors, service providers and 3rd party companies that manage systems or information for BNP Paribas Responsibilities Direct Responsibilities As a Third-Party Technology Risk Assessor, you will perform third-party information and cyber security assessment to identify, monitor, remediate, and manage third party risks ac...

Role Overview: You will be responsible for handling regulatory assessments on behalf of the Tech and Cyber GRC for regulated entities, ensuring all compliance matters are quality-driven and centrally supported with policies and standards. You will lead the Governance of Technology and cyber-related Internal Audit and External audit actions. Additionally, you will support the development and maintenance of a central repository of Cybersecurity regulatory guidance aligned to NIST FSSCC and Cybersecurity Standards with workflow delivering timely evidence and responses to regulatory exams, questionnaires, and assessments. Your role will involve running a centralized repository of Technology & Cy...

Design secure enterprise architectures ensuring compliance, threat mitigation, and resilience. Lead cybersecurity frameworks, implement Zero Trust models, and integrate security in CI/CD and cloud environments. Required Candidate profile Certified security architect with expertise in SIEM, vulnerability management, cloud security, and compliance frameworks. Strong leadership in designing and governing InfoSec solutions.

Role Overview: Assist in planning, executing, and documenting IT audits, focusing on ITGC, SOC audits, ISO 27001 compliance, and data privacy reviews. Work under the guidance of senior auditors to assess internal controls, identify risks, and understand business processes from an audit perspective. Key Responsibilities: Assist in performing IT General Controls and application controls testing. Support SOC 1/SOC 2 audit engagements. Participate in ISO 27001 gap assessments and compliance reviews. Conduct preliminary assessments of data privacy controls. Prepare working papers and draft observations for review. Qualifications & Skills: Bachelors degree in Commerce, Accounting, Information Syst...

3.5.2 Cyber Investigation Trainer Desired Profile Qualification Graduate/postgraduate in any discipline. Certification Active certification in any one of the following (or their equivalent): o Certified Information Systems Security Professional (CISSP) o Certified Information Systems Auditor (CISA) o Certified Computer Examiner (CCE) o Certified Hacking and Forensic Investigator (CHFI) o Certified Ethical Hacker (CEH) o Cisco Certified Network Administrator (CCNA) o Red Hat Certified Engineer (RHCE) o Certified Fraud Examiner (CFE) o Certified Anti Money Laundering Specialist (CAMS) Experience Minimum 5 years of relevant experience in malware analysis / digital forensics analysis / network I...

Experience Level: Experienced Professionals What s the role As an IDT Assurance Advisor NextGen, you ll play a key role in safeguarding Shell s digital landscape by providing reliable assurance on IT risks across the organization. Embedded within the IDT Assurance Services (IAS) team, this role offers a dynamic opportunity to develop expertise in IT risk reviews and audits, define and assess information risk requirements, and contribute to a robust assurance framework. You ll stay ahead of evolving regulatory demands and industry best practices, integrating them into Shell s risk management strategy. As Shell accelerates its energy transition through technology, your work will be critical in...

3.5.7 Cyber Education Expert Qualification PhD / Post-Graduate in cyber-related domain (Computer Science / Information Technology / Information Security / Cyber Security / Digital Forensics / Computer Applications, or equivalent) Certification Desired Profile Active certification in at least one of the following (or equivalent): o Certified Information Systems Security Professional (CISSP) o Certified Information Systems Auditor (CISA) o Certified Computer Examiner (CCE) o Certified Hacking and Forensic Investigator (CHFI) o Certified Ethical Hacker (CEH) o Cisco Certified Network Administrator (CCNA) o Red Hat Certified Engineer (RHCE) Experience Minimum experience of 7 years in teaching/re...

High level of knowledge about the business & IT processes and candidate is expected to understand the Segregation of Duties conflicts and suggest the appropriate mitigation control. Experience in designing new mitigation control based on risk analysis Should be able to effectively manage customers, internal auditors, and external auditors Sound knowledge of User Access Review process and SoD Review and ways to eliminate or mitigate the same- Experience in IT Governance and Risk Management, Internal Control reviews, SAP configuration reviews, Change Management, Identify and Access management review, Application, and Infrastructure Security review. Experience in daily communication and coopera...

Work as part of a team of problem solvers to solve complex business issues from strategy to execution. Use tools, techniques, and firm standard methodologies to support research, analysis and problem solving. Handle, manipulate and analyze data and information responsibly. Communicate with empathy and adapt communication style to meet the needs of the situation and audience. Manage expectations of stakeholders effectively. Embrace different points of view and welcome opposing and conflicting ideas. Uphold the firms code of ethics and business conduct. Identify and make suggestions for efficiencies and improvements when performing work. Flex approach to meet the changing needs of teams and cl...

GRC software, Project Management tools, Security Scanning Tools AWS, Azure, Google and Oracle Cloud Platforms Your Role ResponsibilitiesHeres What Youll Do Provide subject-matter expertise for compliance requirements with a specific focus on SOC(1,2,3), HIPAA, GxP, SOX. Promote Compliance programmes from conception to closure. Partner with teams in developing policies, procedures, and other required documentation. Partner with Engineering and Operations in designing control implementation Lead Products internal audits to validate the efficacy of compliance security controls. Identify & drive compliance gaps to closure working with all team members Lead high impact programme meetings, establi...

Oversee audit professionals across multiple simultaneous audit projects of all sizes and complexity across multiple business areas within and outside of local region, in unfamiliar areas, and for different audit leaders, ensuring audits are completed timely and with high quality; conduct L2 reviews Specialize in one or more specific lines of business; own portfolio with accountability, ownership and horizontal risk view of entire portfolio Collaborate with Audit Leaders to develop the annual Audit Plan, leveraging knowledge of the portfolio, banking, and industry trends to establish arisk-based Audit Plan with adequate coverage Support and/or lead regulatory activities and attend regulatory ...

Position Purpose A primary focus for this position will be to lead audit execution covering end-to-end processes of auditable entities within the IT and Cybersecurity Inspection Generale APAC team. Responsibilities This individual will work closely with audit assignment team members to complete each phase of the audit. This will entail: assessing the sufficiency and suitability of controls to mitigate risks; and testing the operating effectiveness and sustainability of controls; and documenting walk-throughs of in-scope processes; and documenting the investigations conducted and their results; and drafting findings and associated recommendations to address identified gaps in the control envi...

The IT Governance, Risk, and Compliance (GRC) Manager will be responsible for supporting the development, implementation & management of IT governance, risk, and compliance programs. https://mycredila.darwinbox.in/ms/candidate/careers/a6824994528443

Designation : Consultant -GRC Certifications,Qualification and Experience : Bachelor / PG degree with any of the certifications - ISO 27001, CBCP, CISA, CISM, CRISC, CISSP 2 years to 20 years of applied work experience in cyber security programs, audits, assessments, risk, remediation, or cyber security compliance management. JobDescription: Implements security controls, risk assessment framework (ISO 31000, NIST), and program that align to regulatory requirements, ensuring documented and sustainable compliance that aligns and advances client business objectives. Evaluates risks and develops security standards, procedures, and controls to manage risks. Improves client security positioning th...

Opportunity alert! RSM US Integrated Services India Private Limited - Walk-in Drive (face to face) at our Gurugram office. Dear Candidate, We are conducting a walk-in drive at our Gurugram office on 9 th November2025. If this opportunity aligns with your career goals, we'd love to see your profile. If you're interested, please share your updated resume to chetan.n@rsmus.com. Job Description SENIOR ASSOCIATE SOC/SOX (Technology Risk Consulting) Risk Consulting helps clients across various industries by addressing the increasingly complex strategic, operational, compliance, and governance challenges faced by those responsible for managing or overseeing dynamic businesses. Risk Consulting major...

Job Description: We are seeking a skilled and motivated Risk Analyst to join our Security Operations team. This role involves participation in the full risk life cycle of identification, analysis, response and reporting on risks. Related tasks would include contributing to internal policy development, third-party risk management, conducting internal risk assessments and internal audit activities. The ideal candidate is an early-career professional with attention to detail and an eagerness to learn. They are an active listener with strong analytical and problem-solving abilities to catalog and elements of risk and to see interrelated patterns. The work often involves documenting risk factors ...

Key Responsibilities: Lead and inspire the Customer Trust Operations Team, encouraging strategic thinking and excellence in delivering responses to customer inquiries. Develop and maintain strong relationships with internal stakeholders, ensuring alignment and collaboration across the organization. Support customer meetings and audit calls, presenting Thomson Reuters security posture and addressing inquiries with confidence and expertise. Identify and implement new ways of working, utilizing technology to automate and improve processes within the team. Oversee the development and maintenance of standardized responses and security collateral, ensuring accuracy and completeness. Collaborate wi...

As a Senior Digital Risk Advisor at Swiss Re, your role involves overseeing the first-line digital & technology operations risk and control activities. You will be responsible for identifying risks, applying controls, and monitoring, measuring, and reporting performance to technology and business leaders. In this role, you will: - Support Applications and Business stakeholders with applying digital risk governance principles and standards - Contribute to the implementation of the digital risk framework as the trusted digital risk partner - Ensure understanding of IT threats and risks, timely handling of issues, and effective design and operation of IT controls - Collaborate with digital & te...