776 Iso 27001 Jobs - Page 8

Management Level G Core Duties/Responsibilities Risk Identification, Assessment and Analysis Assist and conduct comprehensive risk assessments to identify potential cybersecurity threats and vulnerabilities across EQ s infrastructure, data, applications, mobile and networks. Assist in conducting comprehensive security risk assessments for internal systems, third-party services, and cloud-based infrastructure. Review cloud architecture, deployment models, and services to identify gaps against industry best practices (e.g., CIS Benchmarks, NIST, ISO 27001). Utilise security tools and threat modelling techniques to evaluate the likelihood and impact of various security risks and identify the top priorities. Collaborate with DevOps and Cloud Engineering teams to advise on security controls and risk mitigation strategies in AWS, Azure. Analyse security data from multiple sources (including technical security documents, penetration testing results and code scans) to provide insights into potential risks and security gaps. Assist in designing and recommending risk mitigation strategies based on assessment findings, including updates to policies, security controls and technical solutions. Maintain Risk records and Risk Acceptances regarding IT, Information or Cyber Security in the Company s Risk Register/GRC tool. Regulatory Requirements Identification Research, identify and interpret, with the help of legal and compliance team, cyber security requirements and standards (e.g. GDPR, NIST, ISO27001, SOX, AI Act, DORA). Stay up-to-date with evolving cybersecurity regulations and legal requirements at local, national and international levels in which EQ operates. Assist in compliance assessment and gap analysis to determine EQ s adherence to relevant cybersecurity regulations and frameworks. Ensure that these are incorporated into the Risk Process so that they are rigorously applied, where necessary, to new and changed IT systems and applications. Third-Party Risk Management Conduct Risk Analysis of existing and new third-parties playing a significant role in the Company s supply chain and with access to Company or customer data or the Company s systems Track any significant risk issues arising to completion over agreed timescales. Information Security Metrics & Reporting Assist by collecting and organising data, helping to identify potential risks across various business units and prepare appropriate metrics and reports. Support in the creation of regular and ad-hoc reports for Executives and senior management teams Stakeholder Engagement Engage with various developers and stakeholders across the business in selecting tailored security training on the training platform. Engage in knowledge sharing sessions on emerging threats and security risk trends. Risk Method Development Assist the Information Security Risk Manager in developing and maintaining the EQ Security Risk Process. Assist in developing and implement risk management strategies. Collaborate with IT and security teams to implement technical measures like firewalls, encryption, and MFA. Analysis and improvement of existing information security policies guidelines and procedures, creating new ones where required Define best practice in the design and coding of proprietary systems developed by the Company and support the development teams in adhering to such practices with advice, education and provision of dynamic and static application security testing tools. We are committed to equality of opportunity for all staff and applications from individuals are encouraged regardless of age, disability, sex, gender reassignment, sexual orientation, pregnancy and maternity, race, religion or belief and marriage and civil partnerships. Please note any offer of employment is subject to satisfactory pre-employment screening checks.

Support a culture of risk management, risk and control visibility with measurable risk reduction and effective reporting and governance of risk reduction activities. Develop a Third-Party Risk Management assessment lifecycle, establish new policy, review / update existing risk management policy, standards and procedures. Establish a Technology Risk Management methodology by adopting NIST RMF (SP800-37), CIS v8 Top 18, COBIT 2019, CSA CCM / CSA STAR registry or ISO 31000:2018 frameworks. Optimize program capabilities in planning, organize, and integrate cross-functional information technology projects that are significant in scope and impact to the Technology Risk and Third Party Management team goals. Measure, Manage Mature the program, track progress, drive improvements, develop and report KPIs, KRIs, process metrics and management dashboards. Maintain organizations effectiveness and efficiency by defining, delivering, and supporting strategic analysis and plans for implementing Technology Risk and Third-Party program management process. Participate in performing Technology Risk Assessments of all new projects, technology implementations, new existing vendor onboarding assessments Determine information security risk profiles for various systems, assets, data, vendors etc., using knowledge of Lululemon policy, frameworks, standards and relevant industry best practices. Ability to conduct risk assessments, characterize the system, identify threats / vulnerabilities, control deficiencies, likelihood determination, impact analysis, risk levels, compensatory control recommendation and results documentation. Collaborate in stakeholder management, risk articulation, communication, risk reviews, driving risk acceptance and risk treatment activities Execute automation in applying GRC workflows, tracking risk life cycle, engaging, monitoring, remediating and reporting risks Identifies needs, develops and implements technology-related continuous improvement initiatives for the department. Qualifications- 10+ years Technology Risk Management Third-Party Risk Management experience or a combination of Cybersecurity-GRC and information security experience Bachelor s degree with proficiency in Management Information Systems, Technology Management or Cybersecurity Expertise in technical program management, particularly in areas of security, and/or technology risk management Demonstrated ability to analyze information and assimilate into consumable management reporting Professional certification such as CISM, CRISC, CISSP or PMP is a plus Knowledge/experience with data security and privacy regulations (e.g. NIST CSF, ISO 27001, PCI DSS, GDPR). Effective communication and relationship-building skills, a natural affinity for being curious and inquisitive, and an ability to work with ambiguity, analyze situations and problem solve. Must haves: Acknowledges the presence of choice in every moment and takes personal responsibility for their life. Possesses an entrepreneurial spirit and continuously innovates to achieve great results. Communicates with honesty and kindness and creates the space for others to do the same. Leads with courage, knowing the possibility of greatness is bigger than the fear of failure. Fosters connection by putting people first and building trusting relationships. Integrates fun and joy as a way of being and working, aka doesn t take themselves too seriously

The Presales Consultant for our Cybersecurity Practice will be responsible for engaging clients to understand their security needs and providing tailored, innovative solutions. This role bridges the gap between sales and technical teams, ensuring seamless delivery of cybersecurity solutions while supporting business growth. Responsibilities 1. Solution Design & Technical Expertise: Consulting : Understanding customer requirements and pain points, offering tailored cybersecurity solutions to meet those needs. Technical Demonstrations : Presenting product demos, conducting proof-of-concept (PoC) sessions, and explaining the technical benefits and features of the cybersecurity solutions. Solution Architecture : Collaborating with technical teams to design and architect customized solutions, ensuring they align with the customer s business needs and security goals. 2. Sales Support: Proposal Creation : Collaborating with the sales team to craft compelling proposals, RFP responses, and quotes that highlight the value of the cybersecurity offerings. Costing & Pricing : Providing input on pricing strategies, working with the sales team to ensure solutions are competitively priced while maintaining profitability. Customer Presentations : Delivering engaging presentations to prospects and clients, helping them understand the value proposition of the solutions offered. 3. Relationship Building: Stakeholder Engagement : Building strong relationships with key decision-makers, security architects, and other stakeholders within prospective customer organizations. Customer Education : Helping customers understand the risks, benefits, and compliance aspects related to cybersecurity solutions. Lead Qualification : Qualifying leads and opportunities for the sales team by identifying those with genuine cybersecurity needs that can be addressed by the company s offerings. 4. Market & Competitor Analysis: Industry Trends : Staying updated on the latest trends, emerging threats, and innovations in cybersecurity to better position the company s offerings in the market. Competitive Analysis : Understanding competitor products and differentiating the company s solutions, helping to convey the unique value of your offering to potential customers. 5. Collaboration with Technical & Sales Teams: Cross-functional Collaboration : Working closely with technical delivery teams, consultants, and solution architects to ensure that the proposed solutions are viable and can be successfully delivered post-sale. Feedback Loop: Gathering feedback from customers and internal teams to refine and enhance the product offerings. Requirements 1. Technical Expertise: Strong knowledge of various OEM technologies, including features, use cases, and unique selling points (USPs) for at least three of the following, SOC is must. DLP (Data Loss Prevention) IAM (Identity and Access Management) Email Security EDR/XDR/SIEM VA and PM (Vulnerability Assessment and Patch Management) Cloud Security SASE (Secure Access Service Edge) SOC (Security Operations Center) Hands-on experience in demonstrating cybersecurity solutions, value propositions, and USPs to customers and stakeholders. In-depth understanding of the scope of Professional Services and Managed Services for each technology area. Familiarity with the cybersecurity threat landscape and relevant industry standards and frameworks (e.g., NIST, ISO 27001, CIS Controls). 2. Consultative and Solution-Oriented Skills: Strong ability to communicate technical concepts to non-technical audiences, ensuring clear understanding of product benefits, ROI, and long-term value. Experience in solution design, architecture, and customization based on customer requirements. Proven track record of successful pre-sales engagements, including addressing customer pain points, designing tailored solutions, and closing complex deals in the cybersecurity domain. 3. Certifications (Highly Recommended Few Must-Have): IAM (Identity and Access Management): One Identity Certified Identity Governance and Administration Administrator (IGA) Vulnerability Assessment and Patch Management (VAPM): Qualys Certified Specialist DLP (Data Loss Prevention): Forcepoint Certified Security Expert Netwrix Certified Professional EDR/XDR (Endpoint Detection and Response/Extended Detection and Response): CrowdStrike Certified Falcon Endpoint Protection Engineer SASE (Secure Access Service Edge): Zscaler Certified Expert (ZCE) Netskope Certified Security Professional Versa Networks Certified Professional (VCP) Cloud Security: Certified Cloud Security Professional (CCSP) (ISC2) Microsoft Certified: Azure Security Engineer Associate AWS Certified Security Specialty 4. Additional Skills and Traits: Excellent interpersonal and negotiation skills, with the ability to build rapport with stakeholders at all levels. Project management experience or certifications (e.g., PMP, Agile/Scrum) are beneficial for leading projects or initiatives involving multiple teams. Experience with security tools and platforms for the listed technologies, particularly in integration, customization, and scaling. Understanding of emerging cybersecurity trends (e.g., zero-trust architecture, AI/ML in security, ransomware protection) to stay ahead of the threat landscape. 5. Additional Key Competencies: Strategic thinking with the ability to anticipate customer needs and develop future-proof solutions. Collaboration and team-oriented mindset, working effectively with cross-functional teams (sales, engineering, support) to deliver comprehensive solutions. Adaptability in a fast-paced, ever-changing cybersecurity environment.

We are looking for a highly skilled Security Operations Technical Project Manager to support and enhance our global security posture. This role focuses on the co-ordination and scheduling of vulnerability remediation work globally across infrastructure, applications, databases and network workstreams. The ideal candidate will have hands-on experience with project management and will work closely with program stakeholders and customers. This role will also work closely with the technical engineers to ensure security compliance and operational excellence. Experience: 5+ Years Primary Skills: Agile project management Secondary Skills: Technical skills in Applications, Database, Infrastructure or Networks Responsibilities : Lead and manage projects and/or workstreams, providing technical leadership, ensuring the required quality standards and milestones are met. Work collaboratively with local and remote stakeholders including management, technology architects and technology staff with the lifecycle of operational security compliance, from design and development, through to implementation and maintenance. Implementing a patching schedule to align with SLA and program activities on a re-occurring cadence. Reporting and SLA alignment to be provided into the leadership team on a regular cadence. Regional time zone representation on internal and external customer CAB. Collaborate with global teams to align with security standards and best practices. Provide support with industry standard audits, ensuring compliance with ISO 27001 standards and internal security policies. Maintain documentation and reports related to security operations and remediation efforts. Contribute to future hardware & software planning. Minimum Job Requirements: Bachelors degree, or Minimum 5 years of experience as a technical project manager. Agile adoption towards project management. Ability to balance and drive multiple project deliveries. Familiarity with global security standards, especially ISO 27001. Strong analytical and problem-solving skills. Ability to work in a rotational 24x7 support model . You bring a solution-driven mindset , stay updated with tech trends, and thrive in a collaborative, high-stakes environment. Desirable Certifications: Prince2 Technical certifications Azure Fundamentals etc

Responsibilities Key Deliverables Overseeing adherence to policies, practices, stand ards; ensuring compliance with relevant agencies or bodies. Capability to handle breakdown of all utility Equipments like DG Sets, Compressors, Air Dryers, Hot Water Generators, HVAC, AHUs, HT and LT Panels etc.Analyses breakdown and preventive maintenance of all utility related Equipments, monitors and controls Daily Maintenance Activity Planning and updating of spares consumption. Has knowledge about Energy Efficient Equipments, project planning and execution.Experience in handling Water Treatment Plants like ETP, STP, RO plant as per requirements of legal compliances and has knowledge of preparing new machine installation commissioning.Cost estimation of spare parts, critical spare parts planning through FMEA, monitoring and controlling of Resource Conservation Activities and revenue budget.Involvement in initiatives like Kaizen, 5S, QC Stories, CFTs, etc. Should have knowledge of ISO 14000/OSHAS 18000/TSI6949/ISO 27001 standards calibration and SOP/work instructions Preferred Industries Manufacturing Education Qualification Bachelors of Technology in Mechanical; Bachelors of Technology in Electrical; Bachelors of Technology General Experience 5-8 Years Critical Experience System Generated Core Skills System Generated Secondary Skills

Have in-depth knowledge of governance, risk, and compliance, including internal auditing, audit standard, risk and compliance, cyber security review, policy review, ISO 27001, ISMS etc. Have a good understanding of a Cyber security landscape primarily to prevent them from cyber security threats Perform testing of IT Application Controls, IPE, and Interface Controls through code reviews, IT General Controls review covering areas such as Change Management, Access Management, Backup Management, Incident and Problem Management, SDLC, Data Migration, Batch Job scheduling/monitoring and Business Continuity and Disaster Recovery. Perform Risk Assessment, identification, and Evaluation of Controls, prepare process flow diagrams and document the same in Risk & Control Matrix. Perform business process walkthrough and controls testing for IT Audits. Performing planning and executing audits, including - SOX, Internal Audits, External Audits Exposure to international standards like NIST, CIS 20, ISO27001, ISO 22301, ISO 42001, PCI-DSS etc. Exposure to Privacy, Data Security, Data Governance processes etc. would be an added advantage Conducting controls assessment in manual/ automated environment Support in the Creation of IT Audit Plans for Internal Audit Teams Prepare/Review of Policies, Procedures, SOPs Maintain relationships with client management and the project Manager to manage expectations of service, including work products, timing, and deliverables. Demonstrate a thorough understanding of complex information systems and apply it to client situations. Use extensive knowledge of the clients business/industry to identify technological developments and evaluate impacts on the work to be performed. Coordinate effectively and efficiently with the Engagement manager and the client management keeping both constantly updated regarding project s progress. Collaborate with other members of the engagement team to plan the engagement and develop relevant workpapers/deliverables. Perform fieldwork and share the daily progress of fieldwork, informing supervisors of engagement status. Certifications like CISA, CISSP etc. would be an added advantage. .

Company description Resources is the backbone of Publicis Groupe, the world s third-largest communications group. Formed in 1998 as a small team to service a few Publicis Groupe firms, Re:Sources has grown to 5,000+ people servicing a global network of prestigious advertising, public relations, media, healthcare, and digital marketing agencies. We provide technology solutions and business services including finance, accounting, legal, benefits, procurement, tax, real estate, treasury, and risk management to help Publicis Groupe agencies do their best: create and innovate for their clients. In addition to providing essential, everyday services to our agencies, Re:Sources develops and implements platforms, applications, and tools to enhance productivity, encourage collaboration, and enable professional and personal development. We continually transform to keep pace with our ever-changing communications industry and thrive on a spirit of innovation felt around the globe. With our support, Publicis Groupe agencies continue to create and deliver award-winning campaigns for their clients. Overview JOB SUMMARY: Publicis Re:Sources is hiring a Senior Associate of Security Architecture for the Global Security Team. This full-time position includes identifying security weaknesses in information systems, drafting reports, providing recommendations for security risk mitigation, and collaborating with delivery and infrastructure support teams to address security risks. The candidate, with significant experience as an Information Systems Architect, must be a technical expert in cloud technologies and possess strong general knowledge across a range of technologies such as databases, networking, operating systems, authentication, and encryption along with a solid understanding of the security aspects of all these systems. The responsibilities associated with the position are as follows: Conduct secure architecture reviews of application, cloud, and Identity, & Access Management (IAM) solutions to evaluate the adequacy and effectiveness of security measures. Make recommendations to address identified design and implementation gaps. Threat model key enterprise and agency systems. Collaborate with business and technical teams in developing security risk treatment plans addressing vulnerabilities in applications, cloud environments, and IAM solutions. Document and analyze the impact of new system integrations and updates on the current security posture. Develop and contribute to overarching and solution specific techincal security standards, encompassing application, cloud, and Identify, and Access Management (IAM) domains. Ensure system designs and architectures comply with security best practices, company policies, and industry-recognized security standards (e.g., ISO 27001, PCI DSS, NIST, HIPAA etc.). Periodically evaluate technical security standards and configurations, making recommendations for updates or improvements to ensure they remain current to address changing threat landscape. Collaborate closely with stakeholders, including business teams and internal departments, to ensure comprehensive security needs are understood and met in an efficient manner. Participate in software security review process, document security risks and mitigating controls. Participate in team meetings to collaborate on enterprise and business unit specific initiatives. Participate in the new technology evaluations and peer reviews. ESSENTIAL JOB REQUIREMENTS: Four (4) plus years of experience in Application Security and/or Cloud Security Knowledge of Threat Modeling frameworks, such as STRIDE. Cloud Security Certifications (AWS, Azure, GCP) preferred Knowledge of OWASP Top 10. Knowledge of risk management processes (e.g., methods for assessing and mitigating risk). Knowledge of documenting cyber threats and vulnerabilities. Knowledge of authentication, authorization, and access control methods. Knowledge of data security standards (e.g., PCI, PII, PHI, etc.) Skill in designing multi-level security/cross domain solutions. Ability to apply secure system design tools, methods and techniques. Ability to design architectures and frameworks. Qualifications Bachelor s degree in Computer Science, Engineering, or other Engineering or Technical discipline or equivalent relevant experience Additional information OTHER JOB REQUIREMENTS: Good communication and documentation skills Ability to work effectively and collaboratively with stakeholders Willingness to work with geographically dispersed teams A can do attitude team player who works well under pressure and with dispersed groups, worldwide Must be a self starter with strong organizational skills to enable navigation of the company to identify sponsors, stakeholders and interested parties

About Client: At RemoteStar, we are hiring for one of our clients a privately held IT services and consulting company based in India. They specialize in cloud computing, DevOps, automation, artificial intelligence (AI), machine learning (ML), and digital transformation solutions. Experience: 10 to 15 Years Location - Noida/ Bangalore/Pune Skillset Network Security- (IDS,Firewalls (Palo Alto,Cisco),Web Proxy,IPSec VPN,DDoS protection (Wildfire, Cloudflare), WAF, Firewall Rule assurance - Skybox/Algosec) Vulnerability Management (Nessus, BigFix, Anti Virus,Anti Malware) SIEM - (Devo, Exabeam) Network/Security Forensics (PCAP, Packet Analysis, Wireshark, etc) Container security and Cloud security risk posture management (Prisma Cloud) AWS,Azure and GCP Native Security service awareness IAM Security ( Manage Engine, Azure AD, Key Vault Solution) Job Description Lead and manage the Hybrid Cloud security operations , providing guidance and direction to ensure operational excellence. Oversee security incident response and mitigation efforts, ensuring quick and efficient handling of security breaches or threats. Develop and implement comprehensive security strategies to safeguard all hybrid Cloud systems. Facilitate incident management processes for security-related issues, ensuring timely resolution and minimization of impact. Conduct regular security assessments and audits to identify vulnerabilities and implement corrective measures. Collaborate with stakeholders to develop security roadmaps and participate in daily standups to align security initiatives with organizational goals. Lead change management processes and ITSM, ensuring security protocols are integrated and adhered to. Foster a culture of continuous improvement in network security operations, including process creation and implementation. Demonstrate a deep understanding of security principles, particularly in isolating issues with machine/user validation. Experience in managing Business Continuity and Crisis management Ensuring the security of cloud-based data and applications against unauthorized access, theft, and other threats. Staying up-to-date on the latest cloud security technologies, trends, and best practices. A strong understanding of cloud computing technologies, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). Knowledge of security frameworks such as ISO 27001, NIST Cybersecurity Framework, and CIS Controls. Familiarity with cloud security platforms like Microsoft Azure, Amazon Web Services, and Google Cloud Platform. Certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), or Certified Cloud Architect (CCA) are preferred. Extensive knowledge and experience with developing Cloud Security Frameworks using industry best practices such as those from the Cloud Security Alliance (CSA) and NIST CSF and regulatory requirements such as HIPAA, HITrust and PCI or closely related. Understanding of industry regulatory and compliance requirements (ie, FedRAMP, PCI-DSS, NIST, HIPAA) and skilled at interpreting the compliance and security requirements into implementable and repeatable controls.

Detailed job description - Skill Set: Technically strong hands-on Self-driven Good client communication skills Able to work independently and good team player Flexible to work in PST hour(overlap for some hours) Past development experience for Cisco client is preferred.

About M3: A Japanese global leader in the provision of ground-breaking and innovative technological and research solutions to the healthcare industry. The M3 Group operates in the US, Asia, and Europe with over 5.8 million physician members globally via its physician websites which include mdlinx.com, m3.com, research.m3.com, Doctors.net.uk, medigate.net, and medlive.cn. M3 Inc. is a publicly traded company on the Tokyo Stock Exchange (jp:2413, NIKKEI 225) with subsidiaries in major markets including the US, UK, Japan, South Korea, and China, and in 2020 was ranked in Forbes Global 2000 list. The M3 Group provides services to healthcare and the life science industry. In addition to market research, these services include medical education, ethical drug promotion, clinical development, job recruitment, and clinic appointment services. M3 has offices in Japan, UK, France, Germany, Brazil, Sweden, China, USA, and South Korea, as well as India. Job Description Overview of Fieldwork team: Fieldwork team uses our proprietary tool called IPP which does target list matching with our panel, list upload, emailing, campaign creation, redirections, sample out, fax handling etc to ensure all project sampling activities done properly. Broad Responsibilities: Work on the assigned Sampling task and ensure quality completion in a quick TAT Identify and implement innovative techniques and solutions that can be adapted into Sampling workflow as best practices Conduct quality control checks on process front to ensure error free deliverables Coordinate and consult with Project Managers on prioritizing the work and its deliverables without compromising on client satisfaction and assigned deadline Should be committed for BCP (Business Continuity Plan) when needed Pre-requisites for hiring: Strong expertise in Market Research Services focusing on Healthcare Vertical and consumer experience Strong Knowledge of Excel, Word, and any programming language would be added advantage Adaptability, flexibility and the ability to work under pressure Strong organizational and communication skills Commitment to work beyond working hours to achieve deadline when necessary to keep client satisfaction high As part of job responsibilities, you are required to comply with ISO 20252:2019 and ISO 27001 standards . Willing to work in US Shift (6:00 PM to 3:00 AM or 7:00 PM to 4:00 AM) Qualifications BCA/BSc graduate Additional Information Willing to work in night shifts (US Shift)

Detailed job description - Skill Set: Technically strong hands-on Self-driven Good client communication skills Able to work independently and good team player Flexible to work in PST hour(overlap for some hours) Past development experience for Cisco client is preferred.

Detailed job description - Skill Set: Technically strong hands-on Self-driven Good client communication skills Able to work independently and good team player Flexible to work in PST hour(overlap for some hours) Past development experience for Cisco client is preferred.

JOB PURPOSE GMR seeks a visionary, technically skilled leader to transform our SSC into a Global Capability Centre (GCC). This role will align data and AI strategies across GMR s businesses airports, energy, infrastructure to enable enterprise-wide intelligence and automation. ORGANISATION CHART KEY ACCOUNTABILITIES Accountabilities *Strategy & Vision: Create GMR s data and AI roadmap. Develop models and governance frameworks to expand from SSC to GCC focusing on data and AI services. *Data & AI Architecture: Lead cloud-native data platform development with IT, scaling and maintaining AI/ML applications. Design a unified platform for data engineers and analysts to process and analyse large-scale data. (Experience with Kafka, Snowflake, DBT, Google pub/sub or similar is beneficial.) *Agentic AI & Automation: Deploy Agentic AI systems for autonomous workflows and integrate RPA tools like UiPath and Automation Anywhere for intelligent automation. *AI/ML Ops: Establish ML Ops frameworks for lifecycle governance and real-time AI deployment globally. Governance & Security: Ensure data governance, compliance (GDPR, ISO 27001), lineage, access controls, and security with the group CISO. *ROI: Achieve measurable business impact through insights, APIs, and cost-saving analytics. Talent & Ecosystem: Build a high-performing team and create innovation partnerships with vendors, academia, and AI communities. KEY ACCOUNTABILITIES - Additional Details EXTERNAL INTERACTIONS Consulting and Management Services provider IT Service Providers / Analyst Firms Vendors INTERNAL INTERACTIONS GCFO and Finance Council, Procurement council, IT council, HR Council (GHROC) GCMO/ BCMO FINANCIAL DIMENSIONS None OTHER DIMENSIONS None EDUCATION QUALIFICATIONS Masters in engineering/computer science; preferred certifications include Databricks, PostgreSQL, or cloud platforms. RELEVANT EXPERIENCE 10-15 years experience in data architecture, cloud, AI/ML, and enterprise automation. Expert in GenAI, LLM orchestration (LangChain, AutoGPT, haystack, Llamaindex), MLOps, and RPA platforms. Proven success in scaling AI with clear ROI impact in complex environments. Strong business acumen to influence senior stakeholders. Core technical & ml tools knowledge (languages , frameworks, platforms etc.) Python, SQL, Hugging Face Transformers, Tensorflow, Pytorch, XGBoost, platforms like Google autoML, Amazon sagemaker, azure ML, Google vertex. Knowledge of Ipaas platforms, ERP and CRM integrations, Data engineering and storage, Databricks, snowflake, big query and similar Bonus capabilities LLM Ops. Edge AI, Simulation and synthetic data, Privacy aware AI with encryption. Compliance frameworks. Effective team builder and leader for AI and ML engineers. Aim to grow the AI division to match global standards within 3 years. COMPETENCIES Team Leadership Strategic Leadership Entrepreneurship Breakthrough Thinking Developing self & others Empowering others

Job Title: Head of IT Location: Noida Experience: 13+ years Type: Full-time Role Overview: We are looking for a strategic and hands-on Head of IT to lead our end-to-end technology infrastructure, IT operations, cybersecurity posture, and global support practices. You will own the IT roadmap, ensure seamless delivery of IT services, and manage a high-performing IT team while aligning with organizational goals and compliance requirements. Key Responsibilities: Define and own the IT vision, strategy, and roadmap for infrastructure, systems, and support. Manage a remote support IT Helpdesk & Infrastructure Team on 24x7 Manage SLAs & SLOs for 24x7 IT operation for global customers Lead and mentor cross-functional IT teams including Helpdesk, Infrastructure, and Security. Oversee all aspects of IT infrastructure: cloud (Azure), network (firewalls, switches, WiFi), and endpoints. Drive endpoint security and identity management via Intune, Entra, Defender, M365, and AD. Ensure high availability, performance, and scalability of all systems across Windows, Mac, and Linux OS. Lead implementation and governance of global cybersecurity policies, tools, and compliance standards (e.g., ISO 27001). Define IT budgets, vendor strategy, licensing, and cost optimization plans. Act as a key escalation point for complex issues and collaborate with global IT teams on ticket queues and critical projects. Analyze IT reports and dashboards to track KPIs and drive continuous improvement. Champion process automation and productivity by leading custom Jira automation workflows and SharePoint-based collaboration. Represent IT in internal audits, client reviews, and security assessments. Preferred Skills & Qualifications: 13+ years of experience with at least 3 years in IT leadership roles, including people management Deep hands on experience across Microsoft stack: Intune, Defender, Entra, AD, M365 Strong knowledge of Azure infrastructure and enterprise network management Proven experience implementing and auditing ISO 27001 compliance Expertise in Jira, Confluence, SharePoint and process automation Budget planning, vendor negotiation, and IT asset lifecycle management Strong communication and stakeholder alignment skills Proficiency in English Knowledge of European language will be an added advantage

Job Title: IT Manager Location: Noida/Kolkata Experience: 7 10 years Type: Full-time Role Overview: We are seeking a hands-on and technically proficient IT Manager to lead our IT operations, infrastructure, and support functions. The ideal candidate brings strong experience across devices, operating systems, networks, security tools, and IT process compliance. You will lead a team of Helpdesk Engineers while managing the overall health, performance, and security of IT systems in alignment with global standards. Key Responsibilities: Lead and mentor a team of Helpdesk Engineers to ensure timely and efficient IT support. Manage and monitor infrastructure including networks, on-prem and cloud servers, endpoints, and Azure. Administer and secure devices using Microsoft Intune, Defender, Entra, and manage M365 and AD environments. Oversee Windows, macOS, and Linux operating systems with a strong understanding of their ecosystem. Configure and troubleshoot firewalls, switches, routers, and wireless access points. Participate in global ticket queues and assigned projects as needed. Maintain and configure collaboration tools including Jira, Confluence, and SharePoint. Ensure compliance with global IT processes, ISO 27001 standards, and cybersecurity directives. Analyse dashboards, system reports, and tickets to identify and address gaps proactively. Act as the escalation point for unresolved or high-impact IT issues. Ensure all IT assets and infrastructure comply with cyber security standards and audit requirements. Preferred Skills & Qualifications: Proficiency in Microsoft technologies: Intune, Entra, Defender, M365, Active Directory Hands-on with Jira, Confluence, and SharePoint Strong knowledge of Windows, macOS, and Linux OS Sound understanding of network infrastructure and firewall management Experience managing Azure Infrastructure Familiar with ITIL processes and service management ISO 27001 knowledge or certification is a plus Experience designing Jira automation workflows is a strong advantage

Job Title: IT Manager Location: Noida/Kolkata Experience: 7 10 years Type: Full-time Role Overview: We are seeking a hands-on and technically proficient IT Manager to lead our IT operations, infrastructure, and support functions. The ideal candidate brings strong experience across devices, operating systems, networks, security tools, and IT process compliance. You will lead a team of Helpdesk Engineers while managing the overall health, performance, and security of IT systems in alignment with global standards. Key Responsibilities: Lead and mentor a team of Helpdesk Engineers to ensure timely and efficient IT support. Manage and monitor infrastructure including networks, on-prem and cloud servers, endpoints, and Azure. Administer and secure devices using Microsoft Intune, Defender, Entra, and manage M365 and AD environments. Oversee Windows, macOS, and Linux operating systems with a strong understanding of their ecosystem. Configure and troubleshoot firewalls, switches, routers, and wireless access points. Participate in global ticket queues and assigned projects as needed. Maintain and configure collaboration tools including Jira, Confluence, and SharePoint. Ensure compliance with global IT processes, ISO 27001 standards, and cybersecurity directives. Analyse dashboards, system reports, and tickets to identify and address gaps proactively. Act as the escalation point for unresolved or high-impact IT issues. Ensure all IT assets and infrastructure comply with cyber security standards and audit requirements. Preferred Skills & Qualifications: Proficiency in Microsoft technologies: Intune, Entra, Defender, M365, Active Directory Hands-on with Jira, Confluence, and SharePoint Strong knowledge of Windows, macOS, and Linux OS Sound understanding of network infrastructure and firewall management Experience managing Azure Infrastructure Familiar with ITIL processes and service management ISO 27001 knowledge or certification is a plus Experience designing Jira automation workflows is a strong advantage

"> Home / Home / Careers / Careers / Senior SQA Senior SQA Introduction We are looking for 5+years experienced Senior Software Quality Assurance (SQA) person with a proven track record in software quality assurance, process improvement, and compliance audits. This role demands strong analytical and communication skills, as well as hands-on experience in quality frameworks, SDLC governance, and root cause analysis. The successful candidate will be responsible for ensuring the adherence to organizational quality and information security standards and methodologies through audits, reviews, and proactive process enhancement and will work cross-functionally with development, and support teams to enforce and evolve best practices across projects. Responsibilities include: Guide and support project and support teams in adhering to organizational quality and infosec processes, policies, and best practices. Conduct periodic audits and reviews, including Internal Audits, SDLC work product reviews, and Configuration Audits to ensure compliance with defined processes. Track and follow up on non-conformities identified during audits and reviews, ensuring timely closure and corrective action. Facilitate root cause analysis for . This is to notify jobseekers that some fraudsters are promising jobs with Reflections Info Systems for a fee. Please note that no payment is ever sought for jobs in Reflections. We contact our candidates only through our official website or LinkedIn and all employment related mails are sent through the official HR email id. for any clarification/ alerts on this subject. Apply Now

Type: Hybrid (work from office) Job Description Who We Are: Fareportal is one of the leading sellers of airline tickets in the United States. We are a progressive company that leverages technology and expertise to deliver optimal solutions for our suppliers, customers, and partners. FAREPORTAL HIGHLIGHTS: Fareportal is the number 1 privately held online travel company in flight volume. Fareportal partners with over 600 airlines, 1 million lodgings, and hundreds of car rental companies worldwide. 2019 annual sales exceeded $5 billion. Fareportal sees over 150 million unique visitors annually to our desktop and mobile sites. Fareportal, with its global workforce of over 2,600 employees, is strategically positioned with 9 offices in 6 countries and headquartered in New York City. Job Overview We are seeking a proactive and detail-oriented Internal Auditor to lead and execute internal audits across all business functions. This role will support in accomplishing risk management and governance objective by bringing a systematic and disciplined approach. The Internal Auditor will work closely with various teams to identify risks, control gaps, and improvement opportunities, and support the organization in achieving operational efficiency, compliance, and strategic objectives, thereby bringing a preventive approach in effective risk management and control. Job Description and Responsibilities: Plan and execute internal audits covering business operations, financial controls, technology processes, and information security. Identify control gaps, process inefficiencies, and areas for operational improvement. Perform risk-based audits aligned with the annual audit plan and enterprise risk priorities. Review and assess the effectiveness of internal controls, policies, and procedures. Draft detailed audit reports summarizing findings, risk exposure, and actionable recommendations. Investigate, as required by senior management fraud, embezzlements and defalcations Follow up on audit findings to ensure timely and effective closure of identified issues. Collaborate with process owners, risk champions, and management to develop corrective action plans. Participate in enterprise-wide risk assessments and contribute to risk heat maps. Support operational effectiveness initiatives by identifying data leakage risks and monitoring process adherence. Coordinate with external auditors and regulatory bodies during assessments and audits. Keep abreast of all trends and developments in regulatory requirements, general accounting principles or audit techniques; implement and react quickly to any changes. Obtain buy in of the Business Heads on the Audit Scope Be transparent with the Business owners on the audit scope. Be flexible to take their inputs on the timing of the meetings, sharing data, etc. considering their other work commitments. Communication of the Audit findings to the Business Owners Share the Audit observations as and when they surface during the audit, Give due consideration to any mitigating controls/ procedures or specific scenarios, if any. Take the inputs of the business owners for the recommendations/possible solutions to plug the control gaps, Discuss tentative timelines for the implementing the recommendations Communication of the Audit findings to the Management Classification of the Audit findings and providing a risk ranking for presenting to the management. Present the Audit findings along with the overall status of the Audit Plan and other special initiatives/projects being performance by the function. Agreement of the Business owners of on the action for the recommendations Formally communicate the audit findings to the Business Heads and seek their responses and action plan with timelines. Draw and share the plan for regular follow- up with the Business owners for implementing the recommendations and share the plan Schedule meetings at agreed frequency to check status of the implementation plan. Conduct follow up reviews of financial, operational or regulatory compliance deficiencies noted during audit Skill/Qualification Requirement: Strong conceptual thinking skills especially in the area of operational risks and internal controls Qualified Chartered Accountant/Degree in Information Security/IT/Computer Science 5-7 years of experience in internal audit or the domain of processes, risks and controls, process re-engineering reviews Strong data analysis and analytical skills Self-starter with strong motivation and capacity to work in a newly established team Ability to work independently, manage multiple priorities concurrently and complete projects on schedule Working knowledge of professional auditing standards Knowledge on compliances like ISO 27001/PCI DSS, etc. 3+ years of experience of a Big 4 or consulting background preferred Professional certifications preferred: CISA, CIA, or equivalent. Disclaimer This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Fareportal reserves the right to change the job duties, responsibilities, expectations or requirements posted here at any time at the Companys sole discretion, with or without notice. Type: Hybrid (work from office) Job Description Who We Are: Fareportal is one of the leading sellers of airline tickets in the United States. We are a progressive company that leverages technology and expertise to deliver optimal solutions for our suppliers, customers, and partners. FAREPORTAL HIGHLIGHTS: Fareportal is the number 1 privately held online travel company in flight volume. Fareportal partners with over 600 airlines, 1 million lodgings, and hundreds of car rental companies worldwide. 2019 annual sales exceeded $5 billion. Fareportal sees over 150 million unique visitors annually to our desktop and mobile sites. Fareportal, with its global workforce of over 2,600 employees, is strategically positioned with 9 offices in 6 countries and headquartered in New York City. Job Overview We are seeking a proactive and detail-oriented Internal Auditor to lead and execute internal audits across all business functions. This role will support in accomplishing risk management and governance objective by bringing a systematic and disciplined approach. The Internal Auditor will work closely with various teams to identify risks, control gaps, and improvement opportunities, and support the organization in achieving operational efficiency, compliance, and strategic objectives, thereby bringing a preventive approach in effective risk management and control. Job Description and Responsibilities: Plan and execute internal audits covering business operations, financial controls, technology processes, and information security. Identify control gaps, process inefficiencies, and areas for operational improvement. Perform risk-based audits aligned with the annual audit plan and enterprise risk priorities. Review and assess the effectiveness of internal controls, policies, and procedures. Draft detailed audit reports summarizing findings, risk exposure, and actionable recommendations. Investigate, as required by senior management fraud, embezzlements and defalcations Follow up on audit findings to ensure timely and effective closure of identified issues. Collaborate with process owners, risk champions, and management to develop corrective action plans. Participate in enterprise-wide risk assessments and contribute to risk heat maps. Support operational effectiveness initiatives by identifying data leakage risks and monitoring process adherence. Coordinate with external auditors and regulatory bodies during assessments and audits. Keep abreast of all trends and developments in regulatory requirements, general accounting principles or audit techniques; implement and react quickly to any changes. Obtain buy in of the Business Heads on the Audit Scope Be transparent with the Business owners on the audit scope. Be flexible to take their inputs on the timing of the meetings, sharing data, etc. considering their other work commitments. Communication of the Audit findings to the Business Owners Share the Audit observations as and when they surface during the audit, Give due consideration to any mitigating controls/ procedures or specific scenarios, if any. Take the inputs of the business owners for the recommendations/possible solutions to plug the control gaps, Discuss tentative timelines for the implementing the recommendations Communication of the Audit findings to the Management Classification of the Audit findings and providing a risk ranking for presenting to the management. Present the Audit findings along with the overall status of the Audit Plan and other special initiatives/projects being performance by the function. Agreement of the Business owners of on the action for the recommendations Formally communicate the audit findings to the Business Heads and seek their responses and action plan with timelines. Draw and share the plan for regular follow- up with the Business owners for implementing the recommendations and share the plan Schedule meetings at agreed frequency to check status of the implementation plan. Conduct follow up reviews of financial, operational or regulatory compliance deficiencies noted during audit Skill/Qualification Requirement: Strong conceptual thinking skills especially in the area of operational risks and internal controls Qualified Chartered Accountant/Degree in Information Security/IT/Computer Science 5-7 years of experience in internal audit or the domain of processes, risks and controls, process re-engineering reviews Strong data analysis and analytical skills Self-starter with strong motivation and capacity to work in a newly established team Ability to work independently, manage multiple priorities concurrently and complete projects on schedule Working knowledge of professional auditing standards Knowledge on compliances like ISO 27001/PCI DSS, etc. 3+ years of experience of a Big 4 or consulting background preferred Professional certifications preferred: CISA, CIA, or equivalent. Disclaimer This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Fareportal reserves the right to change the job duties, responsibilities, expectations or requirements posted here at any time at the Companys sole discretion, with or without notice.

GPS XSector Specialism Operations Management Level Senior Associate & Summary At PwC, our people in software and product innovation focus on developing cuttingedge software solutions and driving product innovation to meet the evolving needs of clients. These individuals combine technical experience with creative thinking to deliver innovative software products and solutions. In business analysis at PwC, you will focus on analysing and interpreting data to provide strategic insights and recommendations for improving business performance. Your work will involve strong analytical skills and the ability to effectively communicate findings to stakeholders. At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purposeled and valuesdriven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other. Learn more about us . At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm s growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations & Summary At PwC, our purpose is to build trust in society and solve important problems. We re a network of firms in 157 countries with more than 300,000 people who are committed to delivering quality in Assurance, Advisory and Tax services. Within Advisory, PwC has a large team that focus on transformation in Government through Digital inclusion. The open position is for a candidate who desires to work with government clients and bring about a change in society. A successful candidate will be expected to work proactively and effectively on multiple client engagements over the period of time and take ownership of the entire project delivery he/she entrusted with. Responsibilities Lead the design, implementation and monitoring of cyber security strategies for government programs and infrastructure. Conduct risk assessments, vulnerability assessments and threat modeling of existing and planned IT systems. Coordinate and support the implementation of security controls as per national frameworks such as CERTIn, NISG and DPDP Act and global standards like ISO 27001, NIST, CIS Controls, etc. Define security architecture requirements and ensure integration with IT systems (cloud/onprem/hybrid). Support drafting of cyber security policies, SOPs, compliance guidelines, incident response plans and data protection protocols. Work with internal IT teams and thirdparty vendors to ensure compliance with security guidelines. Perform gap analysis, prepare audit reports and recommend mitigation measures. Provide expert guidance on emerging threats, vulnerabilities and compliance requirements. Engage with stakeholders hand other agencies as required. Monitor and respond to security incidents and support forensic analysis and remediation efforts. Mandatory skill sets Strong understanding of cyber security governance, risk and compliance (GRC). Handson experience with security assessment tools (Nessus, Qualys, Burp Suite, etc.). Experience with ISO 27001 implementation, audits and documentation. Familiarity with firewalls, endpoint protection, SIEM, IAM and DLP solutions. Proven experience in stakeholder management and working with government clients. Excellent documentation and presentation skills. Preferred skill sets Certifications such as CISSP, CISA, CISM, ISO 27001 LA/LI, CEH, or equivalent. Exposure to cloud security (AWS/Azure/GCP). Experience in incident response and digital forensics. Knowledge of data privacy regulations (DPDP, GDPR). Years of experience required 4 to 6 years of experience in cyber security, preferably with exposure to government or largescale public sector projects. Education qualification Bachelor s or Master s degree in Engineering, Information Technology, Computer Science, or equivalent. Additional qualifications in Cyber Security or Information Security are Desirable. Education Degrees/Field of Study required Bachelor of Engineering, Master of Business Administration Degrees/Field of Study preferred Required Skills Burp Suite Accepting Feedback, Accepting Feedback, Active Listening, Analytical Thinking, Business Administration, Business Analysis, Business Case Development, Business Data Analytics, Business Process Analysis, Business Process Modeling, Business Process ReEngineering (BPR), Business Requirements Analysis, Business Systems, Communication, Competitive Analysis, Creativity, Embracing Change, Emotional Regulation, Empathy, Feasibility Studies, Functional Specification, Inclusion, Intellectual Curiosity, IT Project Lifecycle, Learning Agility {+ 19 more} No

GPS XSector Specialism Operations Management Level Senior Associate & Summary At PwC, our people in software and product innovation focus on developing cuttingedge software solutions and driving product innovation to meet the evolving needs of clients. These individuals combine technical experience with creative thinking to deliver innovative software products and solutions. In business analysis at PwC, you will focus on analysing and interpreting data to provide strategic insights and recommendations for improving business performance. Your work will involve strong analytical skills and the ability to effectively communicate findings to stakeholders. At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purposeled and valuesdriven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other. Learn more about us . & Summary At PwC, our purpose is to build trust in society and solve important problems. We re a network of firms in 157 countries with more than 300,000 people who are committed to delivering quality in Assurance, Advisory and Tax services. Within Advisory, PwC has a large team that focus on transformation in Government through Digital inclusion. The open position is for a candidate who desires to work with government clients and bring about a change in society. A successful candidate will be expected to work proactively and effectively on multiple client engagements over the period of time and take ownership of the entire project delivery he/she entrusted with. Responsibilities Lead the design, implementation and monitoring of cyber security strategies for government programs and infrastructure. Conduct risk assessments, vulnerability assessments and threat modeling of existing and planned IT systems. Coordinate and support the implementation of security controls as per national frameworks such as CERTIn, NISG and DPDP Act and global standards like ISO 27001, NIST, CIS Controls, etc. Define security architecture requirements and ensure integration with IT systems (cloud/onprem/hybrid). Support drafting of cyber security policies, SOPs, compliance guidelines, incident response plans and data protection protocols. Work with internal IT teams and thirdparty vendors to ensure compliance with security guidelines. Perform gap analysis, prepare audit reports and recommend mitigation measures. Provide expert guidance on emerging threats, vulnerabilities and compliance requirements. Engage with stakeholders hand other agencies as required. Monitor and respond to security incidents and support forensic analysis and remediation efforts. Mandatory skill sets Strong understanding of cyber security governance, risk and compliance (GRC). Handson experience with security assessment tools (Nessus, Qualys, Burp Suite, etc.). Experience with ISO 27001 implementation, audits and documentation. Familiarity with firewalls, endpoint protection, SIEM, IAM and DLP solutions. Proven experience in stakeholder management and working with government clients. Excellent documentation and presentation skills. Preferred skill sets Certifications such as CISSP, CISA, CISM, ISO 27001 LA/LI, CEH, or equivalent. Exposure to cloud security (AWS/Azure/GCP). Experience in incident response and digital forensics. Knowledge of data privacy regulations (DPDP, GDPR). Years of experience required 4 to 6 years of experience in cyber security, preferably with exposure to government or largescale public sector projects. Education qualification Bachelor s or Master s degree in Engineering, Information Technology, Computer Science, or equivalent. Additional qualifications in Cyber Security or Information Security are desirable. Education Degrees/Field of Study required Bachelor of Engineering, Master of Engineering Degrees/Field of Study preferred Required Skills Burp Suite Accepting Feedback, Accepting Feedback, Active Listening, Analytical Thinking, Business Administration, Business Analysis, Business Case Development, Business Data Analytics, Business Process Analysis, Business Process Modeling, Business Process ReEngineering (BPR), Business Requirements Analysis, Business Systems, Communication, Competitive Analysis, Creativity, Embracing Change, Emotional Regulation, Empathy, Feasibility Studies, Functional Specification, Inclusion, Intellectual Curiosity, IT Project Lifecycle, Learning Agility {+ 19 more} No

0px> Who are we Amdocs helps those who build the future to make it amazing. With our market-leading portfolio of software products and services, we unlock our customers innovative potential, empowering them to provide next-generation communication and media experiences for both the individual end user and enterprise customers. Our employees around the globe are here to accelerate service providers migration to the cloud, enable them to differentiate in the 5G era, and digitalize and automate their operations. Listed on the NASDAQ Global Select Market, Amdocs had revenue of $5. 00 billion in fiscal 2024. For more information, visit www. amdocs. com In one sentence The Information Security Lead develops, maintains, and publishes required information security standards, procedures, and guidelines per domain of responsibility. Responsible for conceiving and executing forward-looking security systems or processes design, implements programs for user awareness, compliance monitoring, security controls design and implementation. What will your job look like You will maintain the organizations information security effectiveness and efficiency by defining and leading the implementation of security approaches, standards and procedures supporting strategic plans and directions You will lead teams to resolve Information Security challenges. Provide the information security requirements for cross-organization projects and accompany the implementation of the requirements. Utilize deep information security understanding to support internal and external business-related activities, formulate IS solutions based on technical and business requirements. Maintain a detailed knowledge of IS solutions and present them to our customers. You will lead unit level initiatives and ensure competency to meet the needs of the team/ Amdocs /Customers. You will design solutions and formulate response to RFx, create POC/demos, and present IS solutions to customers/corporate stakeholders. Utilize deep technical knowledge of IS products and services to align appropriate solutions based on client need. You will lead and manage Information Security Projects, including (as required) budget and resources, customer relationships, timelines, deliverables, quality and overall management. You will recommend information technology strategies, policies, and procedures by evaluating the organizations outcomes, identifying problems, evaluating trends, and anticipating requirements. You will keep updated with emerging security threats and alerts; conduct research on emerging products, services, protocols, and standards in support of security enhancement and development efforts; collaborate with other cyber threat researchers. You will be accountable for meeting quality objectives, adherence to best practices, quality processes, and methodologies; lead continuous improvement via Root Cause Analysis, Lessons Learned, and Prevention processes; Track quality KPIs and continuously improve quality and measurements. You will promote clarity and alignment with ongoing, effective communication to the project team regarding the unit s goals and status, project matters, companywide changes, special initiative status, etc. ; Strive for strong and healthy working relationships within the team. You will provide technical guidance and training to information owners, other security managers, and IT associates. Information Security Manager functions include: You will lead, manage and mentor teams in specific domains such as risk assessment, cyber technologies, corporate security, PMI, SOC, Penetration testing, security operations, etc. You will attract, develop and retain talent to build and maintain strong, effective and competent teams, and ensure the enhancement of their knowledge. Coach and empower the team and foster an environment that encourages teamwork based on motivation and inspiration. Responsible for HR processes such as recruitment, onboarding, definition of clear goals and objectives, ongoing performance management and feedback, career development, and growth of the team and its members. Manage day to day employee relations. 12. Information Security Expert functions include: You will be the technical expert and leader of certain domains such as IT, Application and GRC. All you need is. . . 1. 6-7 years of experience in the information security management ecosystem 2. Familiarity with industry standards and frameworks, such as NIST, CIS, ISO 27001, and GDPR. 3. Strong understanding of security best practices, including, vulnerability management, system hardening, patch management, and secure coding. 4. Proven experience working with security tools such as CrowdStrike, InsightVM, Tripwire, WIZ etc. 5. Experience with cloud security platforms (AWS, Azure) and native security services 6. Knowledge of network security principles & solutions, including IAM, firewalls, IDS/IPS, and secure network design. 7. Good team player - an advantage 8. Ability to scale up - for cross-domain security tools Why you will love this job: You will have the influence on many of the security teams in Amdocs and therefor the whole company You will bring the innovation into security teams in Amdocs You will have the independence to design the role as you think and like

About the company At SBI Card, the motto Make Life Simple inspires every initiative, ensuring that customer convenience is at the forefront of all that we do. We are committed to building an environment where people can thrive and create a better future for everyone. SBI Card is proud to be an equal opportunity & inclusive employer and welcome employees without any discrimination on the grounds of race, colour, gender, religion, creed, disability, sexual orientation, gender identity, marital status, caste etc. SBI Card is committed to fostering an inclusive and diverse workplace where all employees are treated equally with dignity and respect which makes it a promising place to work. What s in it for YOU SBI Card truly lives by the work-life balance philosophy. We offer a robust wellness and wellbeing program to support mental and physical health of our employees Admirable work deserves to be rewarded. We have a well curated bouquet of rewards and recognition program for the employees Dynamic, Inclusive and Diverse team culture Gender Neutral Policy Inclusive Health Benefits for all - Medical Insurance, Personal Accidental, Group Term Life Insurance and Annual Health Checkup, Dental and OPD benefits Commitment to the overall development of an employee through comprehensive learning & development framework Role Purpose This role is responsible for execution, implementation and handling operations of the Network Security, Vulnerability Management, and Patch management and also for managing the Network Security posture, all network security solution platforms for the organization. Role Accountability Provide technical expertise and engineering solutions for network security policies, standards & operations Manage different make/models of firewalls (specially Checkpoint, Fortinet , Juniper, Cisco & Palo Alto), Web gateway solution (Forward Proxy) and virtual private network (VPN) solutions Ensure Configuration Security hardening across network infrastructure appliances (such as router, switch, firewall, load balancer, WAN accelerator etc. ) Remediate Security Incidents at Network layer by coordinating with Partner Vendor teams & IT teams to minimize adverse impact Coordinate patch management activities for network assets along with Security Operation Team and ensure execution of patch deployment as per the schedule received from Infosec for Vulnerability identified in network domain Interact with application teams/Business to translate service SLAs to technology requirements Plan for projected growth and ensuring Infrastructure Security ecosystem is built to sustain service capabilities over time Optimize resources to ensure maximum return on investment Manage assets, track inventory and support contracts related to Network Security function Assist business continuity and disaster recovery pertaining to Network Security Provide escalation support on critical issues pertaining to Network Security solution platforms Lead change, incident, and problem management for IT Infrastructure Security including creating change requests, incident Reports and Root Cause Analysis (RCA) reports Provide routine maintenance and upgrades to server hardware, including software updates and firmware releases Work with external auditors to close the identifies gaps in the Network domain Perform process documentation and compliance adherence Measures of Success Daily availability and uptime in case of any disaster and emergencies Optimize cost of Network Security operations Ensure compliance with all organization policies / guidelines affecting information processing Periodic & timely reporting of Network Security Operations SLA metrics Service uptime / availability % as per agreed SLA Publish Security controls operational metrics as per defined timeline Process Adherence as per MOU Technical Skills / Experience / Certifications Network Technology and Security Certifications CCIE, CCSP-Security, F5 Professional Certification, Cisco SDWAN Certification Experience of ISO 27001 and PCI DSS implementation Knowledge of Network Operations & Device Functionality Expertise in network products and enterprise network infrastructure Knowledge on network security solutions like NIPS, APT, HIPS, WAF, NAC, and Deep Security platform Knowledge and experience on Routers (Cisco SDWAN), Switches (Cisco Nexus), Load Balancers (F5), Firewalls (Cisco, Checkpoint, Juniper), WAN Accelerators (Riverbed/Silver Peak) etc. Firewall Management, Web Gateway Management, VPN Service Management Competencies critical to the role Stakeholder management Verbal and written communication Change Management Qualification BE / B Tech. in Computer Science/IT/ECE Preferred Industry NBFC / BFSI Industry / Telco / IT Networking

Hiring for IT audit and compliance. Compliance, DPDP, IT Audit, ISO 27001, RBI regulation, Excellent communication Loc- Andheri- Marol Exp- 3+ years Apply/share resume to preethi.kumar@harjai.com

Responsibilities : Conduct security assessments for web, Android, and iOS applications. Identify and remediate vulnerabilities across the platform such java and java script Promote a security-first culture and drive security integration in the SDLC. Maintain and update security policies, standards, and procedures. Support ISMS design, implementation, and maintenance. Assist with ISO 27001 and PCI DSS certification and audits. Manage third-party risk programs, including vendor assessments and ongoing monitoring. Maintain vendor risk register and track remediation actions. Collaborate with internal teams to prepare for audits and ensure compliance. Adapt to new technologies, languages, and frameworks as needed. Requirements : Minimum 3 years of experience in Application Security. CEH and OSCP Certification Strong knowledge of security frameworks - Owasp top10 , secure coding, and threat modeling. Deep understanding of SDLC application security threats (e.g., XSS, SQL Injection, CSRF, buffer overflows, business logic flaws, brute force). Strong understanding of Java, Java script and python Experience with security tools (Static Code Analysis, DAST, Penetration Testing) Hands-on experience with security assessments in microservice architectures. Familiarity with authentication flows, payment gateway integration, and business logic security. Experience supporting ISO 27001 and PCI DSS compliance. Ability to work independently in a fast-paced environment. Passionate and practical approach to security challenges Strong Problem Solving and analytical skills. Accustomed to dealing with ambiguity in a fast-paced environment Proven ability to collaborate successfully across cross functions..

1) Job Purpose Fault management for Multivendor Multi technology IP network Responsible for quick restoration of P1/P2 incidents within SLA by applying suitable work around/solution. Ensure timely management escalations for all P1/Special incidents as per process and regular update 2) Key Accountabilities / Key Result Areas (Max 5) Manage, troubleshoot & restore faults across multi vendor multi technology IP networks Able to understand the overlying services Voice, Data and other services and their architecture Able to manage ISP and CORE IP network Comply with internal systems, procedures and processes and ensure that the team comply with industry standards and best practices like ISO20K, ISO27K 3) Core Competencies, Knowledge, Experience, Technical / Professional Qualifications (Max 5) Competencies Description Technical skill evolution: Should have 10+ Years of Telecom experience with minimum 5+ in Incident/Fault Management in IP Should have knowledge of routing and switching protocols like BGP, ISIS, Data centre technologies (SDN, VxLAN), OSPF, HSRP, VRRP etc across CISCO, Juniper, NOKIA etc. Should have strong knowledge of IP Network Architecture with services Excellent Communication and Coordination skills, confident and structured when dealing with conflict Experience in managing major incidents with good understanding of business and service impact. Demonstrate effective stakeholder engagement Operational Skill: Able to handle multiple outages at same time with coordination with relevant stakeholders Strong interpersonal & verbal communications with good written skills. Ability to manage shifts, Calm under pressure, Good problem-solving techniques and Customer focused Able to take responsibility and motivate team members in difficult or stressful situations Digital DNA Should identify automation opportunity and implement it. Process enhancement Should understand industry standard process and framework like ITIL & ISO. Should be able to improve and implement the current INM process Familiar with ISO 27001 & the process of ISO 20000 audit and compliance Always follow HSW rules Core Competencies, Knowledge Professional Qualifications Candidate must possess engineering Bachelors Degree, Post Graduate Diploma, Professional Degree in Information Technology or equivalent Must have foundation qualification in ITIL V3 4) Key Performance Indicators Ability to efficiently and effectively perform the technical requirements with troubleshooting, problem solving, and analytical skills Ability to prioritize work with a sense of urgency and manage issues /escalations to consistently provides high quality and standardized professional services Ability to work independently with a significant attention to detail & Ability to work under pressure. Ability to manage shifts, Calm under pressure, Conscientious with a strong sense of pride and accountability, Good problem solving techniques and Customer focused