Home
Jobs

327 Cism Jobs - Page 12

Filter Interviews
Min: 0 years
Max: 25 years
Min: ₹0
Max: ₹10000000
Setup a job Alert
Filter
JobPe aggregates results for easy application access, but you actually apply on the job portal directly.

9 - 14 years

8 - 12 Lacs

Bengaluru

Work from Office

Naukri logo

We are looking for a skilled Security Consultant Lead with 9 to 14 years of experience in information security, preferably in cloud security. The ideal candidate will have advanced knowledge of computer science and experience in managing significant Information Security risk management functions. ### Roles and Responsibility Review security architectures and provide pragmatic security guidance that balances business benefits and risks. Engage IT project teams throughout the SDLC to identify and prioritize applicable security controls and provide guidance on implementation. Perform threat modeling and risk assessments of information systems, applications, and infrastructure. Maintain Information Security Policies and Compliance standards and enhance InfoSec risk assessment and certification methodologies. Define security configuration standards for shared and multi-tenant platforms and technologies. Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit. Translate technical vulnerabilities into business risk terminology for business units and recommend corrective actions to customers and project stakeholders. Provide knowledge sharing and technical assistance to other team members, acting as a Subject Matter Expert (SME) in responsible technologies with a deep technical understanding of services and technology portfolios. ### Job Requirements Advanced degree in Computer Science or a related discipline; or equivalent work experience. Candidates are preferred to hold or be actively pursuing related professional certifications within the GIAC family of certifications or CISSP, CISM, or CISA, or similar cloud-security oriented certifications. Minimum 9 years of experience in managing a significant Information Security risk management function. Experience in managing communication of security findings and recommendations to IT project teams, business leadership, and technology management executives. Strong working knowledge of cloud security, infrastructure security, application security, Agile & DevSecOps methodologies, and operational security. Knowledge of common information security standards such as ISO 27001/27002, CSA and CIS Controls, NIST CSF, PCI/DSS, FEDRAMP is preferred. Experience with Azure Active Directory (AAD) based Identity and Access Management and Authorization design and integration with API, IDaaS, and Federation technologies is preferred.

Posted 1 month ago

Apply

2 - 7 years

6 - 10 Lacs

Bengaluru

Work from Office

Naukri logo

We are looking for a highly motivated and detail-oriented individual with 2 to 7 years of experience to join our team as a Portfolio Compliance Enablement Specialist in Bengaluru. The ideal candidate will have a strong foundation in Cyber Security, Information Security, or a related field. ### Roles and Responsibility Support projects aimed at improving EY's risk posture and adherence to Information Security policies. Assist in the development and execution of compliance strategies and remediation plans under the guidance of more experienced team members. Contribute to the delivery of processes and/or solutions, focusing on quality and effective risk management. Document and translate technical vulnerabilities into business risk terms for stakeholder communication. Participate in the use and improvement of compliance assessment toolkits under supervision. Support assessments for technology infrastructure, applications, and third-party dependencies. ### Job Requirements At least 2 years of experience in Cyber Security, Information Security, or a related field. A degree in Cyber Security, Information Security, Computer Science, or a related discipline. Certifications such as Security+, Network+, or an interest in pursuing relevant certifications like CRISC, CISSP, CISM, CISA. Basic knowledge of information security standards like ISO 27001/27002, NIST, PCI DSS. Understanding of regulatory requirements such as PCI, SOX, HIPAA, GDPR. Strong communication skills and technical writing skills, and the ability to work effectively within a team environment.

Posted 1 month ago

Apply

2 - 3 years

14 - 18 Lacs

Gurugram

Work from Office

Naukri logo

We are looking for a highly skilled and experienced Consultant to join our team in Gurgaon. The ideal candidate will have 2-3 years of experience in IT Audits, preferably with experience working on FS clients. ### Roles and Responsibility Conduct IT audits, including statutory and internal audits, to ensure compliance with regulatory requirements. Develop and implement effective IT General Controls (ITGC) testing procedures to identify areas for improvement. Collaborate with cross-functional teams to design and execute IT Application Controls (ITAC) testing and Automated Business Controls testing. Perform IT Infrastructure risks and control assessments to identify potential vulnerabilities. Assist in SOC1, SOC2 audits and reporting, as well as IT Compliance and regulatory reporting. Develop and maintain expertise in emerging technologies such as cloud, RPA, AI/ML, and Blockchain. ### Job Requirements Bachelor's degree in Computer Science, Statistics, or M.C.A; Master's degree preferred. Minimum 2-3 years of relevant experience in IT Audits, with a focus on client-facing roles managing audits. Strong knowledge of ITGC, ITAC, and IT Automated Business Controls testing. Experience with IT SOX 404, SOC1, SOC2 audits, and reporting. Familiarity with risk and control assessments considering emerging technologies. Preferred certifications include CISA, CISSP, CISM, CRISC, CCSK, and others relevant to the role.

Posted 1 month ago

Apply

10 - 12 years

16 - 20 Lacs

Bengaluru

Work from Office

Naukri logo

We are looking for a skilled Senior Manager TPRM with 10 to 12 years of experience to join our team in Bengaluru. The ideal candidate will have a strong background in information security, risk management, and controls concepts. ### Roles and Responsibility Provide guidance and share knowledge with team members on complex, judgmental, and specialized issues. Brief the engagement team on client's environment and industry trends, maintaining relationships with client management to manage expectations of service. Demonstrate a thorough understanding of complex information systems and apply it to client situations, using extensive knowledge of the client's business/industry to identify technological developments and evaluate impacts on the client's business. Manage client engagements, determining and deploying the right team with adequate skill sets for executing engagements and periodically reviewing status updates. Contribute to thought leadership documents and develop new methodologies, facilitating discussions/knowledge sharing with key client personnel. Plan and schedule client engagements, staying abreast of current business and economic developments and new pronouncements/standards relevant to the client's business. Identify buyers, influencers, and stakeholders in existing client engagements and build strong relationships. Display teamwork, integrity, and leadership, working with team members to set goals and responsibilities for specific engagements and fostering teamwork and innovation. Drive performance management for self and team, managing the performance management process for direct reportees as per organizational policies. Train and mentor project resources, participating in organization-wide people initiatives. ### Job Requirements Strong knowledge of information security concepts, risk, and controls is required. Knowledge of standards such as ISO 27001/2, ISO 22301, ISO 27018, PCI – DSS, HITRUST, etc., and regulations like FISMA, HIPAA, Reg SCI, MAS, etc. Good knowledge of TCP/IP, OSI layer, networking, and security concepts, along with sound familiarity with OWASP and Secure SDLC standards/frameworks. Experience in LAN/WAN architectures and reviews, cryptography, physical and environmental security, asset security, and identity and access management. CISSP, CISA, CISM, CEH, ISO 27001 Lead Auditor and Lead Implementer certifications are preferred. A BE/BTech degree with a sound industry experience of 10 to 12 years is required.

Posted 1 month ago

Apply

5 - 10 years

13 - 17 Lacs

Bengaluru

Work from Office

Naukri logo

We are looking for a highly skilled and experienced Chartered Accountant (CA) or Master’s degree in management, Information Systems/Technology, Computer Science, Business Analytics, Cybersecurity, or a related discipline with 5 to 10 years of experience to join our team as a Senior Manager in Risk Consulting - Protect Tech. The ideal candidate will have a passion for technology and an ardent desire to work in risk management. ### Roles and Responsibility Consistently deliver quality client services, driving high-quality work products within expected timeframes and on budget. Foster relationships with client personnel to analyze, evaluate, and enhance information systems, developing and improving security at procedural and technology levels. Use knowledge of the current IT environment and industry trends to identify engagement and client service issues, communicating this information to the engagement team and client management through written correspondence and verbal presentations. Demonstrate deep technical capabilities and professional knowledge, quickly assimilating new knowledge. Identify strategic, IT, and business risks, control gaps, weaknesses, and areas of improvement. Design IT Risk Controls frameworks and RACMs, and implement IT general controls, application controls, and business process controls. Conduct IT internal control reviews and review SOC1 or SOC2 reports. Perform IT Risk and Controls assessment with exposure to technologies such as SAP, Oracle, Workday, MS Dynamics, or emerging technologies like Cloud, RPA, AI/ML. Possess knowledge of IT risk, information security, or cyber security frameworks such as COSO, COBIT, ISO, NIST, etc. Understand IT regulatory compliances such as IT SOX, GDPR, ISO, PCI DSS, etc. Have strong exposure working in client-facing roles and collaborating with cross-functional teams including internal audits, IT security, and business stakeholders to assess control effectiveness and facilitate remediation activities. Exhibit excellent communication, documentation, and report writing skills. Relevant industry certifications such as CISA, CISM, CISSP, CRISC, CCSK, ISO 27001 are a plus. ### Job Requirements A Chartered Accountant (CA) or Master’s degree in management, Information Systems/Technology, Computer Science, Business Analytics, Cybersecurity, or a related discipline is required. Minimum 5 years of experience in risks & controls, preferably in a Big 4 or professional firm. Passion for technology and a desire to work in risk management. Strong understanding of IT risk, information security, or cyber security frameworks such as COSO, COBIT, ISO, NIST, etc. Experience in conducting IT internal control reviews and reviewing SOC1 or SOC2 reports. Excellent communication, documentation, and report writing skills are essential. Good to have relevant industry certifications such as CISA, CISM, CISSP, CRISC, CCSK, ISO 27001.

Posted 1 month ago

Apply

10 - 15 years

12 - 17 Lacs

Noida

Work from Office

Naukri logo

We are looking for a Program Leader, IT Security within Identity and Access Management. The Program Manager will use their hands-on technical skills, strong leadership ability and eagerness to design solutions to complex problems as a leader within a larger global team. The Program Manager must be comfortable with communicating to stakeholders, performing security assessments, and prioritizing security risks, as well as creating/presenting high quality deliverables. The position will have a team of direct reports and align under the Director of IAM, Client Identity and Access. Responsibilities : Operate as a People Leader responsible for a team of 30+ global resources, including 2 supervisors Build, lead, and execute IAM strategies to enhance the productivity of R1 operational workforce while also enhancing security posturing. Act as a leader with extensive subject matter expertise to shape the Client Identity and Access team. Work collaboratively with peers and stakeholders to influence technical and business projects to enhance IAM strategies. This included but is not limited to transitional work, integrations, and stead state organization initiatives. This role will identify and execute on strategies core to internal business processes as well as partnering with external providers and business partners to securely enable R1 user access. Complete unbiases analysis of technology options and develop a practice to determine, approve and manager preferred technologies; maintain a list of approved technologies; create communication strategies that will guide the organization to standard technologies or create new standards as development needs arise. Communicate access management security goals and new programs effectively with other department managers within the organization. Ensure fulfillment of legal and contractual IT security, compliance, and privacy mandates. Partner with internal cross-function teams and external customers on technology improvement opportunities. Skills and Experience: 10 years of experience, or combined 5 years in Senior Management and 5 years in IAM or adjacent IT Security framework(s) Experience with inventory management, ticketing workflows, and production and quality oversight Excellent interpersonal and communication skills to work with all levels of management, employees, peers, and vendors Excellent analytical and problem-solving skills to solve/manage complex technical problems Ability to maintain enterprise relationships with internal, external stakeholders, and teams Experience in developing and running multiyear, complex technology initiatives and teams Tenacity, grit, and ability to perform under pressure to achieve deliverables Education Bachelors Degree in Computer Science, Information Technology, Information Security, Healthcare Science, or Business Management Preferred - Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) or similar industry recognized certification.

Posted 1 month ago

Apply

5 - 10 years

7 - 12 Lacs

Hyderabad

Work from Office

Naukri logo

About this role: Wells Fargo is seeking an Audit Manager. Audit is a provider of independent, objective assurance services delivered through a highly competent and diverse team. As a business partner, Audit helps the company accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes. About Enterprise Technology Audit Group: The Enterprise Technology Audit Group (ETAG) conducts and coordinates audits of information technology and information security, primarily focused on the Wells Fargo Technology (WFT) organization, the Independent Risk Management (IRM) Technology, and the Third Party and information Risk Oversight (TPIRO) group. ETAG is broken out into the following sub-teams : Chief Information Office (CIO) - CSBB Technology, Consumer & Small Business Banking, Consumer Lending Technology, Digital & Innovation Technology, Enterprise Functions Technology, Financial Crimes & Enterprise Data Technology, WIM Technology Chief Technology Office (CTO) - Cloud Platforms, CIO Development, Change Enablement, Middleware Information Security - Access Management, NIST Assessment, Cybersecurity Defense Monitoring, Information Protection, Third Party Risk Infrastructure & Technology Recovery - Technology Continuity & Resiliency, Technology Infrastructure Technology Governance - IT Governance, Risk Management, Compliance Strategy & Digital, & Innovation Group (SDI) - Corporate Strategic Planning, Digital Platform, Innovation Group In this role, you will: Lead execution of the integrated audit process Participate in audits in accordance with Wells Fargo Audit Services policy Demonstrate depth and breadth of knowledge and understanding across multiple businesses or develop knowledge in a critical subject matter area Demonstrate comprehensive knowledge and understanding of the financial, operational, technical, and regulatory environment across multiple businesses or develop excellent subject matter knowledge in critical areas of the business Write opinions reflecting relevant facts that lead to logical conclusions Escalate significant risks and loss exposures to appropriate levels of management Ensure documentation and reporting are ready for review by managers and more experienced managers Demonstrate credible challenge Evaluate and provide appropriate solutions for complex problems Lead multiple concurrent projects that are generally moderate to large in size and moderate to high in complexity Identify and assess key risks and controls and develop effective test plans for engagements as assigned with limited guidance Present audit results in an objective and unbiased manner Exhibit appropriate judgment regarding issue notification, issue draft findings to client management, and draft final audit reports Develop and maintain excellent business relationships within Internal Audit and with teams companywide Required Qualifications: 5+ years of Audit, Risk experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education Desired Qualifications : 5+ years of work experience in Technology Governance, Risk Management and Compliance (GRC) or IT Security with at least 5 years in Technology Audit. A professional with auditing, security, or accounting designation e.g., CISA, CISSP, CPA, CA, CIA, CCNA, CISM, CRSIC or to have substantially completed the requirements for such a designation while actively pursuing the completion of such a designation. Background of Technology Audit within international financial service organizations. Lead execution of the integrated audit process Participate in audits in accordance with Wells Fargo Internal Audit policy Demonstrate depth and breadth of knowledge and understanding across multiple businesses or develop knowledge in a critical subject matter area Demonstrate comprehensive knowledge and understanding of the financial, operational, technical, and regulatory environment across multiple businesses or develop excellent subject matter knowledge in critical areas of the business Write opinions reflecting relevant facts that lead to logical conclusions Escalate significant risks and loss exposures to appropriate levels of management Ensure documentation and reporting are ready for review by managers and more experienced managers Demonstrate credible challenge Evaluate and provide appropriate solutions for complex problems Lead multiple concurrent projects that are generally moderate to large in size and moderate to high in complexity Identify and assess key risks and controls and develop effective test plans for engagements as assigned with limited guidance Present audit results in an objective and unbiased manner Exhibit appropriate judgment regarding issue notification, issue draft findings to client management, and draft final audit reports Develop and maintain excellent business relationships within Internal Audit and with teams companywide Job Expectations: Experience in general Information Technology control reviews as well as application control reviews. Strong knowledge of and experience in medium to large-scale application reviews and system development projects, and ability to perform reviews on various platforms (e.g., Unix, Windows, iSeries, z/OS, SQL DB, Oracle DB, network devices, middleware, cloud). Good understanding of technology processes (e.g. change management, security operations, technology operations, business resiliency, etc.), application and infrastructure controls. Good knowledge of system development methodologies, information security controls, access management, technology governance and risk management. Knowledge of information security management frameworks (e.g. COBIT, ISO 2700x, ITIL, NIST Cybersecurity Framework, SANS Top 20 Critical Security Controls, Vulnerability and Penetration testing). Solid knowledge and understanding of audit methodologies and tools that support audit processes. Knowledge of IT and Cloud management and control frameworks Experience with Issue Validation and Remediation Excellent verbal, written, and interpersonal communication skills. Strong organizational, multitasking, and prioritizing skills. Ability to work independently and as part of a team, be flexible. Ability to execute in a fast-paced demanding environment while balancing multiple priorities. Problem solving attitude. Good analytical skills with high attention to detail. Ability to work with minimal supervision and exercise independent judgment consistent with department guidelines.

Posted 1 month ago

Apply

2 - 5 years

7 - 17 Lacs

Bengaluru

Work from Office

Naukri logo

In this role, you will: Participate in less complex development and design of methodologies and standards for review activities companywide in alignment with the risk management framework Ensure effective and appropriate testing, validation, and documentation of review activities for risk programs, risks, and controls according to standards and other applicable policies within Independent Testing Support and implement less complex initiatives with low to moderate risk and exercise independent judgment to guide risk reporting, escalation, and resolution Present recommendations for resolving more complex situations and exercise independent judgment while developing expertise in risk management framework and the risk and control environment Collaborate and consult with colleagues, internal partners and management Required Qualifications: 2+ years of Independent Testing experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education Desired Qualifications: University degree in Business or related discipline 2+ years of relevant experience in risk management (includes compliance, operational risk, issue identification and validation, internal audit, business process management), Technology Audit, Risk and Control Testing Knowledge and understanding of financial services industry: compliance, risk management, or audit operations Expert knowledge levels and understanding of Technology controls Good understanding of Technology domain and Infrastructure Experience in reviewing testing strategies and methodologies; evaluating the adequacy and effectiveness of policies, procedures, processes, initiatives, products, and internal controls; and identifying issues resulting from internal and/or external compliance examinations Experience in testing policy, procedures, control, and business process testing Experience in creating, executing, and documenting compliance, control, and business process testing Intermediate Microsoft Office (Word, Excel, Outlook, and PowerPoint) Ability to take on a high level of responsibility, initiative, and accountability Minimum 2+ years at Big Four/super regional public accounting firm with experience in Technology testing, regulatory, and/or business process, advisory/consulting service. Experience supporting SOX/SOC, Regulatory Exams (Domestic and Intl), Audits, or other technology control related assessments. Strong critical thinking skills with ability to credibly challenge status quo. Strong organization and prioritization skills. Strong relationship management skills: ability to negotiate difficult positions without harming relationships Strong team player and ability to work with minimum guidance Job Expectations: Responsibilities of the Specialist role include, but are not limited to: Completes review/testing activities on an accelerated schedule, raising schedule delays as needed while looking for opportunities to remediate schedule issues. Providing meaningful operational and compliance risks assessments of business processes. Strong analytical skills Supporting efforts to effectively challenge risks in processes and evaluate and/or test controls designed to mitigate those risks. Executing substantive and/or control testing with moderate supervision. Executing the test of design and operating effectiveness for RCSA (Risk & Compliance Self-Assessment) controls. Completes all testing and documentation under limited supervision and appropriately retains all work papers (testing schedule, templates, work-papers, deferrals, deviations, etc.). Providing consultation and subject matter expertise for process related matters including evaluating severity of control deficiencies and related remediation efforts. Documenting test results and any issues identified while also providing recommendations to management. Providing Credible Challenge to the First Line Units as needed. Acting as a change agent for continual improvement of the control environment Chartered Accountant Certified Management Accounting Certified Public Accountant (CPA) Certified Internal Auditor (CIA) MBA Finance/PGDBA Certified Regulatory Compliance Manager (CRCM) Cybersecurity and Infrastructure Security Agency (CISA) Certified Information Security Manager (CISM) Certified in Risk and Information System Control (CRISC) Information Security Management Systems (ISMS) Data Management information

Posted 1 month ago

Apply

6 - 11 years

17 - 32 Lacs

Bengaluru, Delhi / NCR, Mumbai (All Areas)

Hybrid

Naukri logo

6+ yrs of exp in Cyber Security consulting, with min 3 yrs in leadership role Expertise in cybersecurity frameworks & standards such as NIST, ISO 27001, GDPR, DPDPA, PCI DSS, etc. Exp in GDPR, VAPT, App security. Must have exp in consulting

Posted 1 month ago

Apply

3 - 8 years

6 - 11 Lacs

Bengaluru

Work from Office

Naukri logo

About Us Standard At ANZ, were shaping a world where people and communities thrive, driven by a common goal: to improve the financial wellbeing and sustainability of our millions of customers. About the Role As Audit Manager, you will bring to life Internal Audit s value proposition by supporting the bank to move at pace, safely through our enterprise-wide lens and independence to deliver what matters for our customers, the board, and regulators. Your primary responsibility is to provide independent assurance on the risk and control environment. You will support the execution of the Internal Audit Plan for division. You will be accountable for ensuring appropriate and timely assessment of the key risks and controls, and for the design and delivery of assurance activities and insights. Role Type: Permanent Role Location: Bengaluru What will your day look like Ensure risk identification is performed effectively, reducing where possible, the scope of the review without reducing the provision of assurance. Building and actively maintaining communication and engagement with key stakeholders within the Technology business unit. Audit messages and recommendations are value adding, material, show foresight, are timely, commercial and pragmatic. Ensure line management buy into the audit findings, while also proactively and effectively managing any disconnect in opinions that may arise between senior parties during an audit. Deliver appropriate assurance through quality audit reports supported by appropriate audit evidence. Manage or execute Audits in alignment with IA methodology and IIA standards and ensure methodology efficiencies are identified. Identifying and implementing innovative ideas to improve processes, to uplift stakeholder experience across the audit execution lifecycle. Ensure the Audit Director / Audit Owner is appraised of any significant audit issues (this includes audit progress, challenges arising and issues) in a timely manner. Compile and keep up to date own performance and development plans. Solicit and act on development and performance feedback. Respond well to change and willingness to adapt own behaviours to meet changing demands in the industry. Constantly deliver quality on assigned tasks What will you bring Must have knowledge, skills and experiences Experience in Banking Industry, Audit or Risk Understands and aligns to audit approach to Risk Management Framework and Internal Audit Methodology Strong track record of delivering high quality work in complex technical areas (e.g. audit, assurance). Using and applying Data Analytics techniques in the delivery of audits. Excellent written and verbal communication skills. Good to have knowledge, skills and experiences Experience and exposure to auditing cloud-based environments is highly regarded Experience to auditing agile organisations and/or conduct agile audits Sound understanding of Technology and/or Data Governance related regulatory requirements such as CPS234 or CPG235 Banking & finance industry knowledge. Experience within the ANZ Group Technology Division. Experience in supporting change and overcoming resistance to change. While not essential exposure to using or applying data analytics in your previous roles. Qualifications (relevant to this role) Tertiary qualified with Professional (CPA/CA) Post Graduate IT qualifications with technically relevant skills (e.g. CISA, CISSP, CISM, ITIL) So why join us(Bengaluru GCC) ANZ is a place where big things happen as we work together to provide banking and financial services across more than 30 markets. With more than 7,500 people, our Bengaluru team is the banks largest technology, data and operations centre outside Australia. In operation for over 33 years, the centre is critical in delivering the banks strategy and making an impact for our millions of customers around the world. Our Bengaluru team not only drives the transformation initiatives of the bank, it also drives a culture that makes ANZ a great place to be. Were proud that people feel they can be themselves at ANZ and 90 percent of our people feel they belong. We want to continue building a diverse workplace and welcome applications from everyone. Please talk to us about any adjustments you may require to our recruitment process or the role itself. If you are a candidate with a disability or access requirements, let us know how we can provide you with additional support. To find out more about working at ANZ visit https://www.anz.com/careers/ . You can apply for this role by visiting ANZ Careers and searching for reference number 95585. Job Posting End Date 20/05/2025 , 11.59pm, (Melbourne Australia)

Posted 1 month ago

Apply

6 - 9 years

8 - 12 Lacs

Bengaluru

Work from Office

Naukri logo

Cyber Security Engineer Security Architecture Threat Modelling Bengaluru REMOTE Job Overview: We are looking for an experienced Cyber Security Engineer to support digital product teams by implementing and driving robust NIST-based security controls. This role will require a strong understanding of modern application architectures and deep expertise in cloud security, threat modelling, and security architecture. The successful candidate will collaborate with cross-functional product teams to improve the cybersecurity posture of various platforms. Key Responsibilities: Lead the implementation of NIST-based security controls across various digital products. Engage in security architecture discussions with development and product teams. Conduct threat modelling and propose mitigations for vulnerabilities across web, mobile, and cloud-based platforms. Support containerized deployments with a focus on container security best practices. Promote secure development practices by utilizing tools such as SAST and SCA (e.g., GitHub Advanced Security). Secure Microsoft Azure environments, including both managed and unmanaged services. Educate and collaborate with stakeholders across teams to build cybersecurity awareness and drive best practices. Required Skills Experience: Solid understanding of NIST cybersecurity framework and implementation of its controls. Strong grasp of web and mobile application architectures , including servers, databases, VNET/VPC, and firewalls. Proficiency in cloud security , especially Microsoft Azure (certifications are a plus). Hands-on experience with SAST/SCA tools (e.g., GitHub Advanced Security). Experience in container security methodologies. Practical knowledge of threat modelling and common vulnerabilities across interfaces. In-depth familiarity with OWASP Top 10 application security risks. Excellent verbal and written communication skills for stakeholder engagement and security education. Preferred Certifications: CISSP Certified Information Systems Security Professional CISM Certified Information Security Manager Microsoft Azure Security certifications Key Competencies: Security Architecture Threat Modelling Cloud Security (Azure-focused)

Posted 1 month ago

Apply

5 - 10 years

30 - 35 Lacs

Bengaluru

Work from Office

Naukri logo

Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management. As a Tech Risk & Controls Lead in Infrastructure Platforms which is aligned to Enterprise Technology division, you will be responsible for identifying, and mitigating compliance and operational risks in line with the firms standards. You will also provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards. By partnering with various stakeholders, including Product Owners, Business Control Managers, and Regulators, you will contribute to the reporting of a comprehensive view of technology risk posture and its impact on the business. Your advanced knowledge of risk management principles, practices, and theories will enable you to drive innovative solutions and effectively manage a diverse team in a dynamic and evolving risk landscape. Job responsibilities Ensure effective identification, quantification, communication, and management of technology risk, focusing on root cause analysis and resolution recommendations Develop and maintain robust relationships, becoming a trusted partner with LOB technologists, assessments teams, and data officers to facilitate cross-functional collaboration and progress toward shared goals Execute reporting and governance of controls, policies, issue management, and measurements, offering senior management insights into control effectiveness and inform governance work Proactively monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance Required qualifications, capabilities, and skills 5+ years of experience or equivalent expertise in technology risk management, information security, or related field, emphasizing risk identification, assessment, and mitigation Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies Demonstrated ability to influence executive-level strategic decision-making and translating technology insights into business strategies for senior executives Preferred qualifications, capabilities, and skills CISM, CRISC, CISSP, or similar industry-recognized risk and risk certifications are preferred

Posted 1 month ago

Apply

5 - 10 years

12 - 17 Lacs

Hyderabad

Work from Office

Naukri logo

Some careers shine brighter than others. If you re looking for a career that will help you stand out, join HSBC and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further. HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions. We are currently seeking an experienced professional to join our team in the role of Senior Business Analyst In this role, you will: Working to establish best in-class authentication controls on HSBC IT assets. Be responsible for maintaining and uplifting IAM Authentication control processing, applied for onboarding and usage of Group IAM tooling. Support the Authentication control owner as subject matter expert (SME) to face-off to HSBC s stakeholders; work to establish and manage effective relationships across Global Business and Global Functions to enhance the overall business experience. Provide Authentication controls related guidance and answer queries on aspects of Group IAM related tooling. Work in conjunction with the IAM CARA team members to review and streamline a global best in class process and procedure to enhance operational efficiency. Work alongside the IDAM Control Owners to record, monitor and publish MI / KCI reporting and dashboards for the Cybersecurity management and other appropriate stakeholders. Manage standard business communications regarding the Group IAM tooling in conjunction with the other IDAM Control Owners. Support IAM s global team via monthly performance reviews and the annual performance management process. This includes providing oversight of designated tasks and ensure all are tracked and completed to a best-in-class standard. Liaise with project managers and key stakeholders of assigned projects, ensuring all assigned tasks are completed as per project plans Participate where required in relevant controls governance committees and work closely with internal stakeholders across the business to ensure alignment on key initiatives. Provide SME support on audit related requests, in-line with HSBC s internal and external regulatory control standards, including timely responses and time completion of internal and external audit/regulatory driven actions. Adhere strictly to compliance and operational risk controls in accordance with regulatory standards, policies and practices; report control weaknesses; compliance breaches and operational loss events. Research, evaluate and identify Identity & Access Management enhancement opportunities to maintain or surpass industry standards, such as improved automation, simplification and globalization. Assist with the delivery of IAM improvements, automation and future-state objectives and strategies. Adhere to and actively support established policies and procedures in own team. Support change initiatives and embed change initiatives within own team Requirements To be successful in this role, you should meet the following requirements: Identity & Access Management Experience Risk & Issue Management Experience NIST Awareness/knowledge Technical background Previous audit/governance role Strong analytical, technical, and problem-solving skills. Strong presentation and reporting skills. Role relevant qualifications, i.e.CISSP/CISM is desirable but not essential You ll achieve more when you join HSBC. .

Posted 1 month ago

Apply

4 - 8 years

14 - 18 Lacs

Hyderabad

Work from Office

Naukri logo

Minimum 1+ years experience in cyber risk assessments with industry certifications like CISSP, CCSP, CISA, CISM, CRISC, ISO/IEC. Profound knowledge of cybersecurity frameworks, industry standards, and best practices. Familiarity with cybersecurity policies and standards such as NIST and IEC. Experience in network security, infrastructure assessment, and network architecture design review. Knowledge of GDPR, PCI-DSS, NIST, and privacy regulations. Hands-on experience with cloud computing technologies. Experience in conducting end-to-end risk assessments, including impact assessments, regulatory assessments, and control assessments. Proficient in information security risk assessments for cloud services and vendor-managed applications. Hands-on experience in cloud security measures and best practices, ensuring data integrity and confidentiality in cloud environments. Conduct thorough cyber risk assessments for clients, analyzing digital infrastructure, systems, and security controls. Collaborate with cross-functional teams to gather essential information for comprehensive risk assessments. Evaluate and interpret assessment results to identify vulnerabilities and provide mitigation recommendations. Stay updated on cyber threats and industry best practices to enhance risk assessment effectiveness. Prepare clear reports summarizing assessment findings for clients and internal stakeholders. Manage client expectations and satisfaction, acting as an advisor. Excellent communication and presentation abilities for technical and non-technical audiences. Proactive, self-motivated, and committed to continuous learning.

Posted 1 month ago

Apply

3 - 6 years

10 - 14 Lacs

Bengaluru

Work from Office

Naukri logo

Join our dynamic team to navigate complex risk landscapes and fortify technology governance, making a pivotal impact in our firms robust risk strategy. As a Tech Risk & Controls Senior Associate in Cybersecurity & Technology Controls, you will contribute to the successful management of technology-aligned aspects of Governance, Risk, and Compliance in line with the firms standards. Leverage your broad knowledge in risk management principles and practices to assess and monitor risks and implement effective controls. Your role in risk identification, control evaluation, and security governance is crucial in advising on complex situations and enhancing the firm s risk posture. Through collaboration and analytical skills, you will contribute to the overall success of the Technology Risk & Services team and ensure compliance with regulatory obligations and industry standards. Job responsibilities Assess and monitor technology risks, ensuring compliance with firm standards, regulatory requirements, and industry best practices Support implementation of effective controls in collaboration with cross-functional teams and stakeholders Evaluate the effectiveness of existing controls, identify gaps, and recommend improvements to mitigate risks and enhance the firms risk posture Analyze complex situations, provide advice on risk management strategies, and support the implementation of risk mitigation measures Required qualifications, capabilities, and skills Formal training or certification on Tech Risk & Control concepts and 3+ years applied experience Expertise in technology risk management, information security, or a related field, with a focus on risk identification, assessment, and mitigation Experience in risk identification, assessment, and control evaluation, with a strong understanding of industry standards Demonstrated ability to analyze complex issues, develop and implement risk mitigation strategies, and communicate effectively with senior stakeholders Proficient knowledge of risk management frameworks and industry best practices Understanding of national and international Laws, Regulations and Rules (LRR) related to cybersecurity in the financial industry. A demonstrated ability to analyze technology-focused regulations (from US and international agencies) Develop and maintain strong partnerships with key stakeholders at both working & executive levels, and to work across diverse businesses and regions, balancing the needs of multiple organizations Preferred qualifications, capabilities, and skills CISM, CRISC, CISSP, or other industry-recognized risk certifications

Posted 1 month ago

Apply

1 - 2 years

3 - 4 Lacs

Kolkata, Mumbai, New Delhi

Work from Office

Naukri logo

We are seeking a skilled and proactive Cyber Security Engineer to protect our organizations systems, networks, and data from cyber threats. The ideal candidate will be responsible for developing security measures, responding to incidents, and ensuring compliance with industry regulations. You have: Bachelor s degree in cyber security, Computer Science, Information Technology, or related field. 1-2 years of experience with security tools (SIEM, IDS/IPS, EDR, firewalls). Knowledge of network security, encryption, authentication, and cloud security. Understanding of ethical hacking, penetration testing, and forensic analysis. It would be nice if you also had: Experience with cloud security (AWS, Azure, Google Cloud). Knowledge of secure coding practices and DevSecOps. Familiarity with security frameworks and regulatory requirements. Industry certifications preferred (CISSP, CISM, CEH, CompTIA Security etc.). Monitor, detect, and respond to cyber threats, vulnerabilities, and attacks. Implement security measures such as firewalls, encryption, and endpoint protection. Conduct security assessments, penetration testing, and risk analysis. Develop and enforce security policies, procedures, and best practices. Ensure compliance with industry standards (ISO 27001, NIST, GDPR, HIPAA, etc.). Investigate security incidents and provide incident response and forensic analysis. Collaborate with IT and other departments to strengthen cybersecurity posture. Provide cybersecurity awareness training to employees. Stay up to date with the latest security threats, trends, and technologies.

Posted 1 month ago

Apply

2 - 6 years

4 - 8 Lacs

Pune

Work from Office

Naukri logo

At Pitney Bowes, we do the right thing, the right way. As a member of our team, you can too. We have amazing people who are the driving force, the inspiration and foundation of our company. Our thriving culture can be broken down into four components: Client. Team. Win. Innovate. We actively look for prospects who: Are passionate about client success. Enjoy collaborating with others. Strive to exceed expectations. Move boldly in the quest for superior and best in market solutions. Job Description: Join Pitney Bowes as a Senior Software Engineer (SOC Analyst) Years of experience: 2 - 5 years Job Location - Pune You are: A Decisive Contributor who can support and enrich an enterprise-wide incident identification and resolution program. You are a Determined individual who thrive on investigations, and you deliver with precision. You see opportunities where others see challenges. You will: Actively drive IT Security response engagements to completion Ability to support and validate security requirements of IT solutions Participate in and support a team of 9+ SOC analysts and subject matter experts Actively participate in development of cyber security offerings Consult on operational practices to protect information Participate in proactive threat hunting to detect incidents Guide and mentor fellow analysts with investigation and mitigation of security threats and incidents. Monitor security consoles and ticket queues for events, and drive to resolution Learn, support and enrich new security platforms in an enterprise environment Work in a 24x7, fast paced environment with best-in-industry IT Security incidents and technologies Your background: As a SOC Analyst, you have: 3 - 6 years of experience in security incident response and technical forensics investigation 2 - 5 years of experience in IT Network or Cyber Operations Incident handling and forensics skills including knowledge of common probing and attack methods, network/service discovery, system assessment, viruses and other forms of malware. Ability to monitor and analyze SIEM, endpoint, network (Firewall,IPS), and application logs Extensive documentation skills with Excel, PowerPoint and ticketing systems Ability to prepare reports of analysis and results to provide briefings to management Skills in performing and optimizing operational processes Technical expertise in supporting modern and cutting-edge security technologies Preferred Bachelor s degree in information security, Computer Science or equivalent Information Security Certifications such as CISSP, CRISC, and/or CISM Experience interfacing with other internal or external organizations regarding failure and incident response situations Knowledgeable and experienced in: SIEM (Exabeam) or other UEBA platform IDS/IPS (Cisco/Sourcefire/Palo) EDR (CrowdStrike) Email Security (Proofpoint) IRT Coordination SOC/MSS Daily Threat Dashboard Reporting MITRE Framework implementation and auditing Scripting and automation About Pitney Bowes Pitney Bowes (NYSE:PBI) is a global technology company providing commerce solutions that power billions of transactions. Clients around the world, including 90 percent of the Fortune 500, rely on the accuracy and precision delivered by Pitney Bowes solutions, analytics, and APIs in the areas of ecommerce fulfillment, shipping and returns; cross-border ecommerce; office mailing and shipping; presort services; and financing. For 100 years Pitney Bowes has been innovating and delivering technologies that remove the complexity of getting commerce transactions precisely right. For additional information visit Pitney Bowes at https://www.pitneybowes.com/in . Only Talent Matters at Pitney Bowes Pitney Bowes is an equal opportunity workplace. To remove unconscious biases from our hiring process, we encourage Blind Applications from candidates applying for jobs at Pitney Bowes. This means that details such as gender, caste, religion, nationality, and age are omitted from applications. And candidates can choose to reveal only their first or last name on the application. Watch the video here: https: / / www.youtube.com / watchv=dNB-K5KFU78 Watch the videos below for more information about Life at Pitney Bowes: Who we are Pitney Bowes All Stars Pitney Bowes named a Great Place to Work Pitney Bowes Gratitude Video Pitney Bowes COVID Care Pitney Bowes was the recipient of several coveted Awards: We will: Provide the will: opportunity to grow and develop your career Offer an inclusive environment that encourages diverse perspectives and ideas Deliver challenging and unique opportunities to contribute to the success of a transforming organization Offer comprehensive benefits globally ( P B Live Well ) Pitney Bowes is an equal opportunity employer that values diversity and inclusiveness in the workplace. All interested individuals must apply online.

Posted 1 month ago

Apply

4 - 9 years

6 - 11 Lacs

Gurugram

Work from Office

Naukri logo

You Lead the Way. We ve Got Your Back. With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you ll learn and grow as we help you create a career journey that s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally. At American Express, you ll be recognized for your contributions, leadership, and impact every colleague has the opportunity to share in the company s success. Together, we ll win as a team, striving to uphold our company values and powerful backing promise to provide the world s best customer experience every day. And we ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong. Join Team Amex and lets lead the way together. How will you make an impact in this role? Responsible for contacting clients with overdue accounts to secure the settlement of the account. Also, they do preventive work to avoid future overdue with accounts that have a high exposure. Partner with the BU to complete risk assessments and ensure adherence to program requirements. Assist with evaluation of control environments of Third Parties to support security assessment activities Facilitate execution of information security assessments for in-scope third parties (e.g., Manage the inventory of Third Parties, conduct periodic assessments, assess the quality of assessments conducted by External Assessors, define risk ratings as appropriate to the control failures, etc.) Partner with ISO Organization in sharing inputs towards assessment questionnaires and Guidance documents, and for managing assessments related to IS-Critical Third Parties Program Managing transformational projects, as and when required, related to Process improvements, System upgradation and overall Program uplift Assist with analysis and reporting related to TSM lifecycle as needed Minimum Qualifications 4+ years of experience in the financial services industry focus on Operations; including working with complex and dynamic functions and solutions, strong thought leadership is required Customer service focused and results-oriented leader A broad understanding of the IT controls and best practices across key risk domains, including risk assessment methodology, application security, network and infrastructure security, Data loss prevention, and incident management is recommended Prior experience managing risk assessments; including background in audit, compliance, Third Party Risk/Oversight, or other risk control functions Possess ability to lead through a highly matrixed organization Requires ability to influence without direct authority and possess proven collaboration skills Excellent written and verbal communication skills, able to effectively communicate at all levels within the organization is required Being flexible and able to adjust to new needs and new technologies, and be comfortable with ambiguity Preferred Qualifications Current certifications in CISSP, CISM, CISA, CRISC, CGEIT, COBIT, ISO 27001 or PCI is recommended but not mandatory Benefits include: Competitive base salaries Bonus incentives Support for financial-well-being and retirement Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location) Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need Generous paid parental leave policies (depending on your location) Free access to global on-site wellness centers staffed with nurses and doctors (depending on location) Free and confidential counseling support through our Healthy Minds program Career development and training opportunities Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.

Posted 1 month ago

Apply

5 - 10 years

7 - 12 Lacs

Bengaluru

Work from Office

Naukri logo

Visa is seeking a Controls Monitoring & Testing Analyst within its Technology Risk Management program to review and assess Cybersecurity and Technology risks. The candidate will perform Risk Assessments, Design Effectiveness Assessments, and Operational Effectiveness Testing for key technology threat vectors such as security configuration management, firewall configuration, application, user access management, and availability & reliability. Responsibilities include managing stakeholder engagement plans, participating in process walkthroughs, tracking/reporting deliverables, and producing high-quality work papers for all lines of defense and risk stakeholders. Additionally, the candidate will interpret data from source systems to perform statistical sampling and aggregate assessment across various risk management levers, collaborate with technology partners, and distill information into management and executive-level reporting. Key Responsibilities: Technology & Cybersecurity Controls Testing: Perform independent technology and cybersecurity controls testing. Document testing results in detailed workpapers. Prepare management reports based on testing outcomes. Communicate findings with stakeholders. Automation for Continuous Monitoring: Develop automation for continuous controls monitoring/auditing for technology and cybersecurity. Monitor the results of automated controls, perform investigation and follow-ups as needed. Risk & Control Self-Assessment (RCSA): Execute RCSA Risk Business Partner (RBP) controls quality review and sample-based testing. Conduct Key Risk Indicator (KRI) testing. Training, Metrics Alignment & Reporting: Develop and track risk management training. Align metrics with reporting dashboards. Develop reporting and stakeholder communication. Basic Qualification 3 years of relevant work experience and a Bachelors degree Preferred Qualification Bachelor s degree with 5 years of work experience in cyb

Posted 1 month ago

Apply

10 - 15 years

25 - 30 Lacs

Noida

Work from Office

Naukri logo

At Pitney Bowes, we do the right thing, the right way. As a member of our team, you can too. We have amazing people who are the driving force, the inspiration and foundation of our company. Our thriving culture can be broken down into four components: Client. Team. Win. Innovate. We actively look for prospects who: Are passionate about client success. Enjoy collaborating with others. Strive to exceed expectations. Move boldly in the quest for superior and best in market solutions. Job Description: Join Pitney Bowes as a Security Operations Lead Years of experience: 10+ years Job Location - Pune Impact A Proactive Leader who can Develop and manage an enterprise-wide incident identification and resolution program . You are a l oyal individual who thrive s on investigation, and deliver s with precision. You see opportunities where others see challenges. The Job Actively lead multiple engagements simultaneously and seamlessly Ability to identify, provide and validate security requirements of IT solutions Lead a team of 9+ SOC analysts and subject matter experts Actively participate in development of cyber security offerings Be the Trusted Advisor on best practices to protect information Provide proactive threat hunting to detect incidents Guide and mentor L1 and L2 analysts with investigation and mitigation of security threats and incidents. Perform information security best practice audits on platforms and processes Deploy and operationalize new security platforms in an enterprise environment Qualifications & Skills required 5 years of experience leading teams utilizing a Security Incident Event Management Solution 10 years of experience in security incident response and technical forensics investigation Incident handling and forensics skills including knowledge of common probing and attack methods, network/service discovery, system assessment, viruses and other forms of malware. Ability to monitor and analyze SIEM, endpoint, network (Firewall,IPS), and application logs Extensive documentation skills with Excel, PowerPoint and ticketing systems Ability to prepare reports of analysis and results to provide briefings to management Ability to perform MITRE ATT&CK Mapping Skills in building, managing and auditing operational processes Technical expertise in supporting modern and cutting-edge security technologies Knowledgeable and experienced in: SIEM (Exabeam) IDS/IPS (Cisco/Sourcefire/Palo) EDR (CrowdStrike/Defender) IRT Coordination SOC/MSS The MITRE ATT&CK framework Daily Threat Dashboard Reporting FluentBit implementation or comparable JIRA Service Desk Confluence Preferred Skills Bachelor s degree in information security , Computer Science or equivalent Information Security Certifications such as CISSP, CRISC, and/or CISM Experience interfacing with other internal or external organizations regarding failure and incident response situations About Pitney Bowes Pitney Bowes (NYSE:PBI) is a global technology company providing commerce solutions that power billions of transactions. Clients around the world, including 90 percent of the Fortune 500, rely on the accuracy and precision delivered by Pitney Bowes solutions, analytics, and APIs in the areas of ecommerce fulfillment, shipping and returns; cross-border ecommerce; office mailing and shipping; presort services; and financing. For 100 years Pitney Bowes has been innovating and delivering technologies that remove the complexity of getting commerce transactions precisely right. For additional information visit Pitney Bowes at https://www.pitneybowes.com/in . Only Talent Matters at Pitney Bowes Pitney Bowes is an equal opportunity workplace. To remove unconscious biases from our hiring process, we encourage Blind Applications from candidates applying for jobs at Pitney Bowes. This means that details such as gender, caste, religion, nationality, and age are omitted from applications. And candidates can choose to reveal only their first or last name on the application. Watch the video here: https: / / www.youtube.com / watchv=dNB-K5KFU78 Watch the videos below for more information about Life at Pitney Bowes: Who we are Pitney Bowes All Stars Pitney Bowes named a Great Place to Work Pitney Bowes Gratitude Video Pitney Bowes COVID Care We will: Provide the will: opportunity to grow and develop your career Offer an inclusive environment that encourages diverse perspectives and ideas Deliver challenging and unique opportunities to contribute to the success of a transforming organization Offer comprehensive benefits globally ( P B Live Well ) Pitney Bowes is an equal opportunity employer that values diversity and inclusiveness in the workplace. All interested individuals must apply online.

Posted 1 month ago

Apply

3 - 8 years

13 - 17 Lacs

Jaipur

Work from Office

Naukri logo

Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : One Identity Manager Good to have skills : NA Minimum 3 year(s) of experience is required Educational Qualification : 15 years full time education Summary :As a Security Architect, you will define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Your typical day will involve collaborating with various teams to assess security needs, documenting security controls, and transitioning to cloud security-managed operations. You will engage in discussions to refine security strategies and ensure compliance with industry standards, all while adapting to the evolving landscape of cloud technologies. Roles & Responsibilities: Expected to perform independently and become an SME. Required active participation/contribution in team discussions. Contribute in providing solutions to work related problems. Conduct regular assessments of cloud security measures to identify potential vulnerabilities and recommend improvements. Collaborate with cross-functional teams to ensure alignment of security practices with business objectives. Professional & Technical Skills: Must To Have Skills: Proficiency in One Identity Manager. Strong understanding of cloud security principles and best practices. Experience with identity and access management solutions. Familiarity with compliance frameworks such as ISO 27001, NIST, or GDPR. Ability to analyze security incidents and develop effective response strategies. Additional Information: The candidate should have minimum 3 years of experience in One Identity Manager. This position is based at our Jaipur office. A 15 years full time education is required. Qualification 15 years full time education

Posted 1 month ago

Apply

5 - 10 years

13 - 17 Lacs

Hyderabad

Work from Office

Naukri logo

Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : ForgeRock Access Management Good to have skills : Identity Access Management (IAM) Minimum 5 year(s) of experience is required Educational Qualification : 15 years full time education Summary :As a Security Architect, you will define the security architecture, ensuring that it meets the business requirements and performance goals. You will play a crucial role in safeguarding our organization's systems and data. Roles & Responsibilities: Expected to be an SME, collaborate and manage the team to perform. Responsible for team decisions. Engage with multiple teams and contribute on key decisions. Provide solutions to problems for their immediate team and across multiple teams. Ensure the security architecture aligns with business requirements and performance goals. Design and implement security solutions to protect the organization's systems and data. Conduct risk assessments and vulnerability testing to identify potential security threats. Develop and maintain security policies, standards, and procedures. Stay up-to-date with the latest security trends and technologies. Train and educate employees on security best practices. Collaborate with cross-functional teams to integrate security measures into the development lifecycle. Investigate and respond to security incidents and breaches. Perform security audits and assessments to ensure compliance with industry regulations. Provide guidance and support to junior security professionals. Professional & Technical Skills: Must To Have Skills: Proficiency in ForgeRock Access Management. Good To Have Skills: Experience with Identity Access Management (IAM). Strong understanding of security architecture principles and best practices. Experience in designing and implementing security solutions. Knowledge of security frameworks and standards such as ISO 27001 and NIST. Familiarity with network security technologies and protocols. Experience in conducting risk assessments and vulnerability testing. Ability to analyze complex security issues and provide effective solutions. Additional Information: The candidate should have a minimum of 5 years of experience in ForgeRock Access Management. This position is based at our Bengaluru office. A 15 years full time education is required. Qualification 15 years full time education

Posted 1 month ago

Apply

3 - 8 years

13 - 17 Lacs

Pune

Work from Office

Naukri logo

Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : German Language Good to have skills : NA Minimum 3 year(s) of experience is required Educational Qualification : 15 years full time education Summary :As a Security Architect, you will define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Your typical day will involve collaborating with various teams to assess security needs, documenting the implementation of cloud security controls, and facilitating the transition to cloud security-managed operations. You will engage in discussions to refine security strategies and ensure compliance with industry standards, all while adapting to the evolving landscape of cloud technologies and security threats. Roles & Responsibilities: Expected to perform independently and become an SME. Required active participation/contribution in team discussions. Contribute in providing solutions to work related problems. Conduct regular assessments of cloud security measures to identify areas for improvement. Collaborate with cross-functional teams to ensure alignment of security practices with business objectives. Professional & Technical Skills: Must To Have Skills: Proficiency in German Language. Strong understanding of cloud security principles and frameworks. Experience with security compliance standards such as ISO 27001 or NIST. Familiarity with risk assessment methodologies and tools. Ability to communicate complex security concepts to non-technical stakeholders. Additional Information: The candidate should have minimum 3 years of experience in German Language. This position is based at our Pune office. A 15 years full time education is required. Qualification 15 years full time education

Posted 1 month ago

Apply

5 - 10 years

13 - 17 Lacs

Bengaluru

Work from Office

Naukri logo

Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : SailPoint IdentityNow Good to have skills : SailPoint IdentityIQ Minimum 5 year(s) of experience is required Educational Qualification : 15 years full time education Summary :As a Security Architect, you will define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. You will also document the implementation of the cloud security controls and transition to cloud security-managed operations. Roles & Responsibilities: Expected to be an SME Collaborate and manage the team to perform Responsible for team decisions Engage with multiple teams and contribute on key decisions Provide solutions to problems for their immediate team and across multiple teams Develop and implement security policies and procedures Conduct security assessments and audits Stay updated on the latest security trends and technologies Professional & Technical Skills: Must To Have Skills: Proficiency in SailPoint IdentityNow Good To Have Skills: Experience with SailPoint IdentityIQ Strong understanding of identity and access management Knowledge of cloud security best practices Experience in designing and implementing security solutions Ability to communicate complex security concepts to non-technical stakeholders Additional Information: The candidate should have a minimum of 5 years of experience in SailPoint IdentityNow This position is based at our Bengaluru office A 15 years full time education is required Qualification 15 years full time education

Posted 1 month ago

Apply

5 - 10 years

13 - 17 Lacs

Pune

Work from Office

Naukri logo

Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : Security Solution Development Good to have skills : NA Minimum 5 year(s) of experience is required Educational Qualification : 15 years full time education Summary :As a Security Architect, you will define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. You will also document the implementation of the cloud security controls and transition to cloud security-managed operations. Roles & Responsibilities: Expected to be an SME Collaborate and manage the team to perform Responsible for team decisions Engage with multiple teams and contribute on key decisions Provide solutions to problems for their immediate team and across multiple teams Lead security solution development projects Conduct security assessments and audits Develop security policies and procedures Professional & Technical Skills: Must To Have Skills: Proficiency in Security Solution Development Strong understanding of cloud security principles Experience with security architecture design Knowledge of security compliance standards Hands-on experience with security tools and technologies Additional Information: The candidate should have a minimum of 5 years of experience in Security Solution Development This position is based at our Pune office A 15 years full time education is required Qualification 15 years full time education

Posted 1 month ago

Apply

Exploring CISM Jobs in India

The demand for Certified Information Security Manager (CISM) professionals is on the rise in India as organizations are focusing more on securing their digital assets. CISM professionals play a crucial role in designing, implementing, and managing information security programs to protect an organization's sensitive data and information systems.

Top Hiring Locations in India

  1. Bangalore
  2. Mumbai
  3. Delhi
  4. Pune
  5. Hyderabad

Average Salary Range

The average salary range for CISM professionals in India varies based on experience and location. Entry-level positions can expect a salary range of INR 6-10 lakhs per annum, while experienced professionals can earn upwards of INR 20 lakhs per annum.

Career Path

A typical career progression for CISM professionals may include roles such as Information Security Analyst, Information Security Manager, Chief Information Security Officer (CISO), and ultimately, a Senior Information Security Consultant.

Related Skills

In addition to CISM certification, employers often look for professionals with skills such as: - Cybersecurity - Network Security - Security Risk Management - IT Governance

Interview Questions

  • What is the role of CISM in an organization? (basic)
  • Can you explain the difference between CISM and CISSP certifications? (medium)
  • How do you handle a security breach in an organization? (advanced)
  • What is your experience with implementing security policies and procedures? (basic)
  • How do you stay updated with the latest cybersecurity trends and threats? (medium)
  • Can you describe a successful security project you have led in the past? (advanced)
  • What is the importance of risk management in information security? (basic)
  • How do you assess the security posture of an organization? (medium)
  • Explain the concept of defense in depth in cybersecurity. (advanced)
  • How do you ensure compliance with data protection regulations such as GDPR? (medium)
  • Describe a scenario where you had to handle a security incident in real-time. (advanced)
  • How do you prioritize security measures based on risk assessment? (medium)
  • What is the role of encryption in information security? (basic)
  • Can you explain the concept of security governance? (medium)
  • How do you communicate security risks to non-technical stakeholders? (advanced)
  • What is the importance of security awareness training for employees? (basic)
  • How do you conduct a security audit of an organization's systems? (medium)
  • Describe a time when you had to resolve a conflict between security requirements and business needs. (advanced)
  • How do you ensure the continuity of operations in the event of a security incident? (medium)
  • What is the significance of incident response planning in cybersecurity? (basic)
  • How do you handle vendor risk management in information security? (medium)
  • Can you explain the concept of threat intelligence in cybersecurity? (advanced)
  • Describe a situation where you had to make a tough security decision under pressure. (medium)
  • How do you assess the effectiveness of security controls in an organization? (advanced)

Closing Remark

As you prepare for CISM job opportunities in India, remember to showcase your expertise in information security, risk management, and governance during interviews. Stay updated with the latest trends in cybersecurity and practice answering both technical and situational questions confidently. Good luck in your job search!

cta

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

Featured Companies