Information Security Analyst, AVP

Job Title: Information Security Analyst, AVP

Location: Bangalore, India

Role Description

The Risk Lead Function covering Chief Security Office (CSO) CTO, IS Threat Operations and Office of the CSO is looking for an Information Security Specialist who will support the Risk Lead in managing the risk, audit and regulatory portfolio. The job plays a vital role in fulfilling internal and external control requirements, ensuring transparency around the current risk exposure and guiding the organization within an ever-changing regulatory landscape.

We are looking for a candidate with an independent work attitude, and excellent problem-solving skills, who can work on multiple tasks in parallel and can cope with tight timelines.

Your key responsibilities

• Partners and builds strong relationships with Embedded Risk Teams, Risk Lead Peers, CSO teams, regulatory engagement groups and Subject Matter Experts.
• Oversees Issue and Finding Remediation Activities and reports on progress, escalates delays and ensures a timely closure of existing risks Issue (both Audit and Self Identified Issues) Tracking and Reporting.
• Provides Risk Advisory and consultancy for Subject Matter Experts stakeholders during finding remediation, audit and regulatory engagements, interfaces with audit functions and coordinates audit engagements.
• Questions existing processes and highlights potential risk exposures to initiate appropriate activities for further risk reduction.

Your skills and experience

• Holds a Bachelors degree in Computer Science, Engineering, Information Security or equivalent and ideally industry certifications like CISSP, CISM, CISA and / or CRISC.
• Has several years of experience working in Information Risk and Security and working on regulations in the financial industry.
• Familiarity with risk registers, documentation and reporting, controls and frameworks
• Excellent English skills, both written and verbal
• Possesses very good analytical skills, with the ability to break down complex problems into actionable and understandable steps, balancing security requirements with business needs
• Ability to communicate IT security issues to other business areas in technical and non-technical language, as the candidate will liaise with the respective stakeholders and translate technical risk into business language