Jobs
Interviews

3659 Nist Jobs - Page 4

Setup a job Alert
JobPe aggregates results for easy application access, but you actually apply on the job portal directly.

3.0 years

0 Lacs

Gurugram, Haryana, India

On-site

Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : Identity and Access Management (IAM) Operations, Microsoft Azure Active Directory Good to have skills : NA Minimum 3 Year(s) Of Experience Is Required Educational Qualification : 15 years full time education Summary: We are seeking a highly skilled Senior Entra ID Engineer/Architect to lead the design, implementation, and support of our cloud-based identity and access management solutions leveraging Microsoft Entra ID (formerly Azure Active Directory). This role will focus on securing user identities, implementing conditional access, enabling secure hybrid identity, and driving modern identity governance initiatives to protect organizational assets. Roles & Responsibilities: -Develop conditional access policies, MFA, passwordless, and identity protection strategies -Integrate on-prem Active Directory with Entra ID via Azure AD Connect or Entra Connect -Evaluate and design SSO integrations with SaaS applications -Configure and manage Entra ID features, including groups, roles, dynamic group assignments, and administrative units -Set up secure hybrid identity models and synchronization -Enable and manage Entra ID Conditional Access, Identity Protection, Privileged Identity Management (PIM), and entitlement management -Implement secure app registrations and enterprise application integrations -Support SCIM-based provisioning for connected apps -Perform advanced troubleshooting and root cause analysis of authentication, authorization, and provisioning issues -Oversee directory synchronization health and support hybrid identity operations -Implement Zero Trust principles using Entra ID security capabilities -Support secure privileged identity workflows (PIM, Just-In-Time access) -Align Entra ID deployments with compliance and governance frameworks (e.g., CIS, NIST, ISO 27001) -Stay current with new Entra ID features, roadmap, and best practices -Identify opportunities for automation (PowerShell, Graph API) -Recommend improvements to enhance the overall security and efficiency of the identity platform Professional & Technical Skills: - Must To Have Skills: Proficiency in Identity and Access Management (IAM) Operations, Microsoft Azure Active Directory. - Strong understanding of cloud security principles and frameworks. - Experience with identity governance and administration tools. - Knowledge of risk management and compliance standards related to cloud security. - Familiarity with security incident response and management processes. Additional Information: - The candidate should have minimum 3 years of experience in Identity and Access Management (IAM) Operations. - This position is based at our Gurugram office. - A 15 years full time education is required.

Posted 2 days ago

Apply

3.0 years

0 Lacs

Gurugram, Haryana, India

On-site

Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : Security Compliance Management Good to have skills : Security Architecture Design Minimum 3 Year(s) Of Experience Is Required Educational Qualification : 15 years full time education Summary: Seeking an experienced Security Architect/ Security Compliance Professional to lead and support the design, implementation, and maintenance of security governance, risk, and compliance (GRC) frameworks. This role ensures that the organization complies with industry standards and regulations such as ISO/IEC 27001, PCIDSS, NIST CSF, SOC 2, TISAX and other security frameworks.. The candidate will work cross-functionally to manage audits, assess risks, and drive continuous improvement in the security posture of the organization. Your typical day will involve collaborating with various teams to document the implementation of cloud security controls and facilitating the transition to cloud security managed operations, ensuring that all security measures align with organizational standards and compliance requirements. You will also engage in continuous improvement initiatives to enhance the security posture of the organization. Roles & Responsibilities: Expected to perform independently and become an SME GRC professional. Required active participation/contribution in client discussions. Contribute in providing solutions to compliance related complex situations Conduct regular assessments of security framework based or cloud security controls to ensure compliance with established standards. Collaborate with cross-functional teams to identify and mitigate potential security risks. Professional & Technical Skills: Proficient in Information Security, Cyber Security and Governance, Risk, and Compliance (GRC). Has significant exposure to evolving landscape of security compliance requirements Lead and manage security compliance initiatives across the organization. Manage/ Conduct gap assessments and implement controls in alignment with compliance standards (e.g., ISO 27001, PCIDSS, NIST, SOC 2, GDPR and other relevant frameworks). Coordinate and support internal and external security audits, including evidence collection and remediation planning. Partner with business, IT, and legal teams to ensure compliance requirements are understood and implemented. Has exposure or working knowledge of Third party risk assessments (TPRM) Develop and maintain security policies, procedures, and documentation in line with regulatory needs. Monitor compliance status and prepare reports and metrics for leadership. Educate teams on compliance requirements and drive a culture of security awareness. Relevant certifications : Any one -ISO27001LA/LI, ISO3100 or CISA, CISM, CRISC, or equivalent. Additional Information: The candidate should have 3-5 years of relevant experience in Information Security Governance, Risk and Compliance (GRC). A 15 years of full time education is required. This position is based at our Gurgaon/ Bangalore and Other Accenture locations

Posted 2 days ago

Apply

7.5 years

0 Lacs

Gurugram, Haryana, India

On-site

Project Role : Security Delivery Lead Project Role Description : Leads the implementation and delivery of Security Services projects, leveraging our global delivery capability (method, tools, training, assets). Must have skills : Security Compliance Management Good to have skills : Security Architecture Design Minimum 7.5 Year(s) Of Experience Is Required Educational Qualification : 15 years full time education Summary: Seeking an experienced Security Architect/ Security Compliance Professional to lead and support the design, implementation, and maintenance of security governance, risk, and compliance (GRC) frameworks. This role ensures that the organization complies with industry standards and regulations such as ISO/IEC 27001, PCIDSS, NIST CSF, SOC 2, TISAX, and others. The candidate will work cross-functionally to manage audits, assess risks, and drive continuous improvement in the security posture of the organization. Your typical day will involve collaborating with various teams to document the implementation of cloud security controls and facilitating the transition to cloud security managed operations, ensuring that all security measures align with organizational standards and compliance requirements. You will also engage in continuous improvement initiatives to enhance the security posture of the organization. Roles & Responsibilities: Expected to perform independently and become an SME or manage a team of GRC professional. Required active participation/contribution in client discussions. Contribute in providing solutions to compliance related complex situations Conduct regular assessments of security framework based or cloud security controls to ensure compliance with established standards. Collaborate with cross-functional teams to identify and mitigate potential security risks. Professional & Technical Skills: Proficient in Information Security, Cyber Security and Governance, Risk, and Compliance (GRC). Has significant exposure to evolving landscape of security compliance requirements Lead and manage security compliance initiatives across the organization. Manage/ Conduct gap assessments and implement controls in alignment with compliance standards (e.g., ISO 27001, PCIDSS, NIST, SOC 2, GDPR and other relevant frameworks). Coordinate and support internal and external security audits, including evidence collection and remediation planning. Partner with business, IT, and legal teams to ensure compliance requirements are understood and implemented. Develop and maintain security policies, procedures, and documentation in line with regulatory needs. Monitor compliance status and prepare reports and metrics for leadership. Educate teams on compliance requirements and drive a culture of security awareness. Relevant certifications : ISO27001LA/LI, ISO3100 or CISA, CISM, CRISC, or equivalent. Additional Information: The candidate should have 8-10 years of relevant experience in Information Security Governance, Risk and Compliance (GRC). This position is based at our Gurgaon/ Bangalore and Other Accenture locations A 15 years of full time education is required.

Posted 2 days ago

Apply

0 years

0 Lacs

Gurgaon, Haryana, India

On-site

Join our Team About this opportunity: Join Ericsson as an IT Security Professional, a pivotal role fundamental to safeguarding our information assets across the IT environment. This position involves providing IT security operations, expertise, support and solutions, grounded on the IT Security Requirement. The successful candidate will enable compliance, adhering to applicable internal / external requirements, laws, regulations, and standards. What you will do: Facilitate the implementation of security requirements in the business framework. Oversee and assure the execution of IT Security initiatives across Ericsson and measure security posture and risk appetite. Certify IT solutions for security and enforce policies. Engage in the development and implementation of IT Security strategy across Ericsson's IT infrastructure. Manage IT Security Incident responses and promote IT Security knowledge growth through training initiatives across Ericsson IT. Maintenance and evolution of standardized security frameworks (ISMS, ISO 27001, NIST, BCM, etc.) and deliver security services to stakeholders. Organize internal and external IT Security audits or assessments while ensuring the readiness of IT security support and expertise. The skills you bring: Security Assurance. Ericsson Information Security Management System. Access Control. Ericsson Information Security Assessments and Audits. IT Security Monitoring. CIA, Threats and Vulnerabilities. ISO 27001. Enterprise information security architecture - Cyber security. Ericsson Information Security Risk Management Instruction. Ericsson Information Security Requirements. Ericsson Information Security Measurements. Cloud Security DGS. Third Party Security Management. Security Incident Management. Security Governance and Compliance. Why join Ericsson? At Ericsson, you´ll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what´s possible. To build solutions never seen before to some of the world’s toughest problems. You´ll be challenged, but you won’t be alone. You´ll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next. What happens once you apply? Click Here to find all you need to know about what our typical hiring process looks like. Encouraging a diverse and inclusive organization is core to our values at Ericsson, that's why we champion it in everything we do. We truly believe that by collaborating with people with different experiences we drive innovation, which is essential for our future growth. We encourage people from all backgrounds to apply and realize their full potential as part of our Ericsson team. Ericsson is proud to be an Equal Opportunity Employer. learn more. Primary country and city: India (IN) || Noida Req ID: 770320

Posted 2 days ago

Apply

2.0 - 3.0 years

0 Lacs

Thane, Maharashtra, India

On-site

Job Title: GRC Consultant (Governance, Risk, Compliance, ISO 27001) Location: Mumbai Job Type: Full-time Experience: 2-3 years Introduction: We are looking for a detail-oriented and proactive GRC Consultant to join our team. The ideal candidate will have strong expertise in ISO 27001, information security policy creation, and implementation of Governance, Risk, and Compliance frameworks. This role will be instrumental in developing and maintaining an organization-wide ISMS, ensuring regulatory compliance, managing audits, and strengthening risk and policy governance. ISO 27001 Audits & ISMS Implementation: Lead internal audits and gap assessments for ISO 27001 compliance. Assist in planning, implementing, maintaining, and improving the Information Security Management System (ISMS) as per ISO 27001 standards. Maintain and update the Statement of Applicability (SoA) and Risk Treatment Plans. Identify non-conformities and drive corrective/preventive actions. Coordinate external ISO 27001 surveillance and certification audits. 📝Policy Development & Documentation: Create, review, and update policies and procedures to meet GRC and ISO 27001 standards. Ensure documentation reflects current compliance requirements and emerging risks. Map controls to policies and ensure alignment with audit and regulatory expectations. ⚖️ GRC Framework Implementation & Management: Design and implement GRC frameworks aligned with international standards and regulatory requirements. Collaborate with senior leadership to define key risk indicators (KRIs), controls, and governance procedures. Maintain GRC registers, including asset inventory, risk register, and control mapping. ⚠️ Risk Management: Conduct information security risk assessments using structured methodologies. Evaluate and prioritize risks based on likelihood and impact. Develop risk mitigation strategies and assist with control implementation and monitoring. 📊 Audit & Compliance Reporting: Prepare comprehensive audit reports highlighting compliance status, gaps, and risk exposure. Track implementation of corrective actions post-audit and maintain audit trails. Assist in the preparation of audit plans, checklists, and evidence collection processes. 👥 Stakeholder Engagement & Training: Collaborate with business functions, IT, external auditors, and vendors to ensure audit readiness and policy compliance. Conduct awareness programs and training sessions on ISO 27001, information security best practices, and GRC responsibilities. Promote a culture of compliance and continuous improvement across departments. 🔄 Continuous Monitoring & Improvement: Stay updated with changes in ISO standards, cybersecurity threats, and regulatory requirements. Recommend and implement improvements in policies, controls, and audit processes to maintain an effective GRC posture. Key Skills & Qualifications: 🎓 Experience: 2–3 years in GRC, ISO 27001 implementation/audits, policy management, and ISMS operations. 🧠 Knowledge: In-depth understanding of ISO 27001, NIST, GDPR, and other information security and privacy standards. Strong grasp of risk management frameworks and internal control systems. Familiarity with GRC tools (e.g., RSA Archer, MetricStream) is an advantage. 🛠 Skills: Expert in writing and implementing security policies and procedures. Strong auditing, documentation, and risk assessment capabilities. Excellent analytical, communication, and project coordination skills. 📜 Certifications: ISO 27001 Lead Auditor or Lead Implementer certification (preferred). Additional certifications such as CISA, CISM, CISSP, or GRCP are a plus. 💼 Soft Skills: Self-motivated and accountable. Strong attention to detail and organizational skills. Ability to work cross-functionally and manage multiple priorities. Why Join Us? ✔️ Competitive compensation package. ✔️ Opportunity to lead ISO 27001 projects and policy frameworks ✔️ Growth in the high-demand area of Governance and Information Security ✔️ Collaborative work culture focused on compliance, innovation, and security excellence. How to Apply: Interested candidates are encouraged to submit their resume and cover letter outlining their relevant experience and qualifications to: hr@synradar.com.

Posted 2 days ago

Apply

5.0 years

0 Lacs

India

Remote

Location : Remote (India only) Type : Full-Time Experience : 5+ years in SOC/NOC environments Company : Symosis Security About the Role Symosis Security is hiring experienced Tier 2 SOC Analysts to support our 24x7 Managed Security Services delivery. You’ll play a critical role in triaging and responding to security alerts, conducting threat investigations, and continuously tuning detection logic using CrowdStrike, InsightIDR, and InsightVM. Key Responsibilities Analyze and triage alerts in InsightIDR and CrowdStrike Falcon Perform initial and secondary investigation of potential threats Correlate events, enrich alerts with contextual data, and escalate as needed Tune detection rules, reduce false positives, and document response playbooks Conduct threat hunting and IOC enrichment based on evolving threat intel Track vulnerability findings and coordinate with the vulnerability management process Collaborate closely with U.S.-based SOC Manager and global analyst team Support onboarding, shift handoffs, and continuous improvement of SOC workflows Requirements 5+ years of experience in a SOC, NOC, or MSSP environment Strong working knowledge of EDR , SIEM , and VM tools — ideally CrowdStrike , InsightIDR , and InsightVM and ServiceNow Familiarity with NIST, MITRE ATT&CK, and common alert triage frameworks Strong documentation, incident reporting, and communication skills Willingness to work night or rotating shifts to support U.S. client coverage Tool certifications (CrowdStrike, Rapid7) preferred or achievable within 4 weeks

Posted 2 days ago

Apply

2.0 - 3.0 years

4 - 9 Lacs

Mumbai, Maharashtra, India

On-site

2-3 years of experience in GRC, Information Security, or Compliance roles, preferably in a FinTech or financial services environment. Strong knowledge of PCI DSS, ISO 27001, SOC 2, GDPR, RBI guidelines, and other financial regulatory frameworks. Experience conducting internal audits, risk assessments, and compliance reviews. Familiarity with GRC tools and risk management frameworks (e.g., NIST, COSO, COBIT). Strong analytical, problem-solving, and stakeholder management skills. Educational & Professional Credentials Bachelors degree in information technology, Computer Science, i.e. MSc Computer Science, B. Tech or Equivalent technical background. Certifications: CISA, CISM, CRISC, CISSP, ISO 27001 Lead Auditor, PCI ISA/QSA. Experience working with payment systems, digital banking, remittances, or forex operations. Knowledge of third-party risk management (TPRM) and security governance models. Required Knowledge & Skills Role Overview: The GRC Manager will be responsible for establishing, implementing, and overseeing Governance, Risk, and Compliance frameworks within the company. This role ensures compliance with PCI DSS, ISO 27001, and other regulatory requirements, while also managing risks related to financial transactions, data security, and operational processes in a FinTech environment. Governance & Compliance: Implement and maintain PCI DSS, ISO 27001, and other applicable compliance frameworks. Develop and enforce policies, procedures, and controls to meet regulatory and industry standards. Conduct periodic gap assessments and audits to ensure compliance with relevant security and privacy regulations (e.g., RBI guidelines, GDPR, etc.). Collaborate with internal teams (Security, IT, Legal, Product) to ensure compliance is embedded in all business processes. Stay updated on regulatory changes and proactively implement necessary compliance measures. Risk Management: Develop and manage the Enterprise Risk Management (ERM) framework, identifying, assessing, and mitigating risks related to cybersecurity, operations, and third-party vendors. Conduct risk assessments and business impact analyses to identify vulnerabilities in processes and technology. Oversee third-party/vendor risk management to ensure compliance with security and privacy requirements. Monitor key risk indicators (KRIs) and report findings to senior management. Audit & Incident Management: Lead internal and external audits related to PCI DSS and ISO 27001 compliance. Coordinate with auditors and regulators to address compliance gaps and implement corrective actions. Establish and oversee incident response protocols to ensure swift action in case of security breaches or compliance violations. Conduct root cause analysis (RCA) for compliance issues and implement continuous improvement measures. Training & Awareness: Conduct employee training programs on risk, compliance, and security best practices. Promote a strong compliance culture within the organization through regular awareness campaigns.

Posted 2 days ago

Apply

4.0 - 8.0 years

4 - 8 Lacs

Kolkata, West Bengal, India

On-site

Job description This role reports to the Information Security Governance, Risk and Compliance (GRC) Manager and will work across all the product and technology teams to strengthen and enforce Bottomline s information security posture. As the Information Security GRC consultant, you will be responsible for building trust and confidence among our clients on the information security posture. This role also involves working closely with stakeholders to ensure adherence to regulatory requirements and security frameworks (e.g., SWIFT, NACHA, PCI, NIST, GLBA). Essential Functions and Responsibilities: Governance - work with key stakeholders to develop, implement and enhance the information security policies, standards and processes in alignment with regulatory requirements and security frameworks (e.g., SWIFT, NACHA, PCI, NIST, GLBA). Execute governance routines and reporting to ensure compliance with required policies and standards. Risk Management - build and maintain a control library for enterprise-wide controls and product specific controls. Maintain the risk register (issues and risk acceptances) to ensure effective tracking, prioritization and reporting of risks. Process risk acceptances to ensure they are appropriately rated with sufficient mitigating controls. Compliance - Coordinate assessments to ensure compliance with applicable regulations and industry requirements (e.g., SWIFT, NACHA, PCI, NIST, GLBA). Client Support - Gather, assess and present the information security posture to customer (i.e., completion of request for information, contract language reviews, completion of due diligence questionnaires etc.). Education and Awareness - develop and deliver information security awareness and training Required Experience & Qualifications 6+ years of experience in Cybersecurity and Risk Management Bachelor s degree In depth knowledge on regulations and industry requirements (e.g., SWIFT, NACHA, PCI, NIST, GLBA). Preferred Experience & Qualifications Cyber certifications (e.g., CISSP) or equivalent Role: Head - Information Security Industry Type: Software Product Department: IT & Information Security Employment Type: Full Time, Permanent Role Category: IT Security Education UG: Any Graduate PG: Any Postgraduate

Posted 2 days ago

Apply

4.0 - 8.0 years

4 - 8 Lacs

Hyderabad, Telangana, India

On-site

Job description This role reports to the Information Security Governance, Risk and Compliance (GRC) Manager and will work across all the product and technology teams to strengthen and enforce Bottomline s information security posture. As the Information Security GRC consultant, you will be responsible for building trust and confidence among our clients on the information security posture. This role also involves working closely with stakeholders to ensure adherence to regulatory requirements and security frameworks (e.g., SWIFT, NACHA, PCI, NIST, GLBA). Essential Functions and Responsibilities: Governance - work with key stakeholders to develop, implement and enhance the information security policies, standards and processes in alignment with regulatory requirements and security frameworks (e.g., SWIFT, NACHA, PCI, NIST, GLBA). Execute governance routines and reporting to ensure compliance with required policies and standards. Risk Management - build and maintain a control library for enterprise-wide controls and product specific controls. Maintain the risk register (issues and risk acceptances) to ensure effective tracking, prioritization and reporting of risks. Process risk acceptances to ensure they are appropriately rated with sufficient mitigating controls. Compliance - Coordinate assessments to ensure compliance with applicable regulations and industry requirements (e.g., SWIFT, NACHA, PCI, NIST, GLBA). Client Support - Gather, assess and present the information security posture to customer (i.e., completion of request for information, contract language reviews, completion of due diligence questionnaires etc.). Education and Awareness - develop and deliver information security awareness and training Required Experience & Qualifications 6+ years of experience in Cybersecurity and Risk Management Bachelor s degree In depth knowledge on regulations and industry requirements (e.g., SWIFT, NACHA, PCI, NIST, GLBA). Preferred Experience & Qualifications Cyber certifications (e.g., CISSP) or equivalent Role: Head - Information Security Industry Type: Software Product Department: IT & Information Security Employment Type: Full Time, Permanent Role Category: IT Security Education UG: Any Graduate PG: Any Postgraduate

Posted 2 days ago

Apply

4.0 - 8.0 years

4 - 8 Lacs

Delhi, India

On-site

Job description This role reports to the Information Security Governance, Risk and Compliance (GRC) Manager and will work across all the product and technology teams to strengthen and enforce Bottomline s information security posture. As the Information Security GRC consultant, you will be responsible for building trust and confidence among our clients on the information security posture. This role also involves working closely with stakeholders to ensure adherence to regulatory requirements and security frameworks (e.g., SWIFT, NACHA, PCI, NIST, GLBA). Essential Functions and Responsibilities: Governance - work with key stakeholders to develop, implement and enhance the information security policies, standards and processes in alignment with regulatory requirements and security frameworks (e.g., SWIFT, NACHA, PCI, NIST, GLBA). Execute governance routines and reporting to ensure compliance with required policies and standards. Risk Management - build and maintain a control library for enterprise-wide controls and product specific controls. Maintain the risk register (issues and risk acceptances) to ensure effective tracking, prioritization and reporting of risks. Process risk acceptances to ensure they are appropriately rated with sufficient mitigating controls. Compliance - Coordinate assessments to ensure compliance with applicable regulations and industry requirements (e.g., SWIFT, NACHA, PCI, NIST, GLBA). Client Support - Gather, assess and present the information security posture to customer (i.e., completion of request for information, contract language reviews, completion of due diligence questionnaires etc.). Education and Awareness - develop and deliver information security awareness and training Required Experience & Qualifications 6+ years of experience in Cybersecurity and Risk Management Bachelor s degree In depth knowledge on regulations and industry requirements (e.g., SWIFT, NACHA, PCI, NIST, GLBA). Preferred Experience & Qualifications Cyber certifications (e.g., CISSP) or equivalent Role: Head - Information Security Industry Type: Software Product Department: IT & Information Security Employment Type: Full Time, Permanent Role Category: IT Security Education UG: Any Graduate PG: Any Postgraduate

Posted 2 days ago

Apply

8.0 - 10.0 years

0 Lacs

India

On-site

JOB SUMMARY: The Security Analyst is primarily responsible for executing various information security control assessment procedures to support numerous compliance programs. The role will coordinate with security/compliance point of contacts throughout the enterprise to confirm assessment scope, prepare/execute assessment procedures and prepare necessary reporting for internal or external stakeholders. The role will specifically be supporting the Third-Party Risk Management function performing controls assessments over third party vendors providing services and products across different Disney business units. This includes helping to improve the overall effectiveness and efficiency of the assessment process. In addition to supporting the Third-Party Risk Management function, this role will also help support other various compliance programs such as Sarbanes-Oxley, ISO27001, PCI DSS, etc. KEY RESPONSBILITIES: Support the Third-Party Risk Management Functio nExecute third-party related due diligence assessments .Coordinate assessment activities with internal business stakeholders and vendors .Maintain KPIs on an ongoing basis .Create and maintain necessary documentation related to the planning, execution, and reporting of assessments, correspondence, findings, and remediation plans in TWDC systems .Contribute to the overall optimization of the third-party risk management functio nSupport various other enterprise-wide information security compliance efforts, including, but not limited to :Sarbanes-Oxley support in the form of internal control design and operating effectiveness testing .Service Organization Controls (SOC) report reviews for key vendors .ISO27001 / K-ISMS support in the form of risk assessment and consulting with control/process owners on remediation and ongoing monitoring .PCI DSS support in the form of annual QSA audit management .Perform ad-hoc customized control risk assessments to analyse information security and compliance risks. Work with various process/control owners to plan, execute, and report assessment results, including the documentation and monitoring of treatment and mitigation measures . SKILLS & ATTRIBUTES FOR SUCCESS : Excellent stakeholder managem entWorking knowledge of information security related frameworks including, but not limited to NIST, PCI DSS, ISO 2700x, SOC reporting (e.g., SSAE18, ISAE340 2).Working knowledge of cloud security and client-server architect ureExperience in the management of risk, controls, and complia nceKnowledge of risk assessment methodologies – qualitative/quantitat iveExcellent analytical and problem-solving ski llsExcellent presentation making and delivery ski lls PREFERRED EDUCATION & EXPERIE NCE: Relevant Bachelor’s/Master’s degree from an accredited university or equivalent experi ence.8-10 years of experience across Third-Party Risk Management, Information Security and Audit & Compliance monit oringMinimum of 5 years in TPRM/Internal Audit/ Risk.Preferred experience with a large company and/or Big 4 accounting firm.One or more credentials - CISA, CRISC, ISO27001 LA/LI, CISSP, C CSSP.Experience in AI/ML and Cloud Devops is a plus.

Posted 2 days ago

Apply

0.0 years

0 Lacs

Hyderabad, Telangana

Remote

Senior Software Engineer Hyderabad, Telangana, India Date posted Jul 31, 2025 Job number 1854515 Work site Up to 50% work from home Travel 0-25 % Role type Individual Contributor Profession Software Engineering Discipline Software Engineering Employment type Full-Time Overview The Infrastructure and Developer Platform (IDP) team within the Microsoft Threat Protection (MTP) organization builds and maintains the infrastructure and developer platform that almost all Defender products (Defender for Endpoint, Defender for Identity, etc.) rely on. This platform allows engineers across MTP to more easily deploy their services, lower costs, and increase security and reliability across our fleet. This position will specifically focus on Azure Kubernetes Security within the organization. The IDP team is at the heart of Microsoft's security infrastructure, providing the essential tools and frameworks that empower our engineers to innovate and deliver cutting-edge security solutions. Our platform is designed to streamline the deployment process, enhance cost-efficiency, and bolster the security and reliability of our services. By leveraging the latest technologies and best practices, we ensure that our Defender products operate seamlessly and securely, protecting millions of users worldwide. Qualifications Qualifications Required – Bachelor’s or Master’s degree in Computer Science, Engineering, or a related technical field. 8+ years of professional software engineering experience, with a strong track record of delivering production-grade distributed systems. Deep expertise in Kubernetes, including cluster architecture, workload orchestration, and security hardening e.g. RBAC, Workload Idenrtity, Container Runtime Security. Hands-on experience with containers (Docker, containerd) and container orchestration platforms (AKS, EKS, GKE). Proficiency in one or more programming languages such as Go, C++, C, Python, or Java. Experience building and operating cloud-native services on Azure or other public cloud platforms. Strong understanding of site reliability engineering (SRE) principles, including observability, incident response, and automation. Ability to work effectively with cross-functional teams and manage multiple priorities. Qualifications: Other Requirements – CKA, CKS, CISSP, or other relevant security and Kubernetes certifications. Experience building/creating Kubernetes Operators etc. with large-scale AKS deployments, ideally in enterprise or hyperscale environments Experience with security frameworks such as NIST, CIS Benchmarks, and PCI-DSS, and ability to assess and mitigate risks in Kubernetes environments. Familiarity with Linux internals, networking, and kernel-level container security. Responsibilities Serve as a Kubernetes subject matter expert, driving architecture, design, and implementation of scalable, secure, and resilient AKS-based solutions. Design and implement cloud-native security solutions using Azure technologies, with a focus on container runtime protection, policy enforcement, and threat detection. Own and deliver production-grade services with high availability, reliability, and performance across global AKS deployments. Develop and maintain CI/CD pipelines, secure build systems, and automated testing frameworks tailored for Kubernetes workloads. Drive observability and telemetry improvements, including logging, monitoring, alerting, and incident response for services. Identify and implement innovative approaches to secure Kubernetes workloads at scale, including leveraging AI/ML for anomaly detection. Contribute to strategic initiatives that shape Microsoft’s container security roadmap and influence industry best practices. Mentor junior engineers and contribute to engineering culture through code reviews, design discussions, and knowledge sharing. Demonstrate ownership and accountability for end-to-end delivery of features and services. Exhibit growth mindset by continuously learning and adapting to new technologies, threats, and customer needs. Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.  Industry leading healthcare  Educational resources  Discounts on products and services  Savings and investments  Maternity and paternity leave  Generous time away  Giving programs  Opportunities to network and connect Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Posted 2 days ago

Apply

0.0 years

0 Lacs

Gurugram, Haryana

On-site

Gurgaon,Haryana,India Job ID 770320 Join our Team About this opportunity: Join Ericsson as an IT Security Professional, a pivotal role fundamental to safeguarding our information assets across the IT environment. This position involves providing IT security operations, expertise, support and solutions, grounded on the IT Security Requirement. The successful candidate will enable compliance, adhering to applicable internal / external requirements, laws, regulations, and standards. What you will do: Facilitate the implementation of security requirements in the business framework. Oversee and assure the execution of IT Security initiatives across Ericsson and measure security posture and risk appetite. Certify IT solutions for security and enforce policies. Engage in the development and implementation of IT Security strategy across Ericsson's IT infrastructure. Manage IT Security Incident responses and promote IT Security knowledge growth through training initiatives across Ericsson IT. Maintenance and evolution of standardized security frameworks (ISMS, ISO 27001, NIST, BCM, etc.) and deliver security services to stakeholders. Organize internal and external IT Security audits or assessments while ensuring the readiness of IT security support and expertise. The skills you bring: Security Assurance. Ericsson Information Security Management System. Access Control. Ericsson Information Security Assessments and Audits. IT Security Monitoring. CIA, Threats and Vulnerabilities. ISO 27001. - Enterprise information security architecture - Cyber security. Ericsson Information Security Risk Management Instruction. Ericsson Information Security Requirements. Ericsson Information Security Measurements. Cloud Security DGS. Third Party Security Management. Security Incident Management. Security Governance and Compliance. Why join Ericsson? At Ericsson, you´ll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what´s possible. To build solutions never seen before to some of the world’s toughest problems. You´ll be challenged, but you won’t be alone. You´ll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next. What happens once you apply?

Posted 2 days ago

Apply

0.0 - 2.0 years

0 Lacs

Gurugram, Haryana

On-site

Location: Gurugram, Haryana; Hyderabad, Telangana Time type: Full time Job level: Associate Job type: Regular Category: Technology Risk Services ID: JR113394 About us We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM. As an associate in RSM’s growing Technology Risk Consulting, you will have the opportunity to develop into a seasoned consultant through a high degree of client and industry exposure, career development and mentorship opportunities, and a diverse and inclusive culture. The fast-paced and dynamic environment in which we operate will provide you with daily challenges and exciting opportunities. In the Technology Risk Consulting Practice, our consultants help our clients with design and optimization of controls utilizing a general knowledge of business processes, accounting, and information technologies by identifying and prioritizing risk and transform their technology risk management and assurance capabilities to be aligned to the key risks and strategies of their organization. Responsibilities include Develop an understanding of the RSM Technology Risk Consulting approach, methodology and tools Develop an understanding of the Industry leading frameworks and methodologies for Sarbanes-Oxley, COBIT, NIST and ITIL Demonstrate understanding of business processes, internal control risk management, IT controls, and related regulatory and compliance standards Perform technology risk assessments and reviewing, documenting, evaluating control’s design and operating effectiveness, IT internal audit consulting activities (internal audits over ERP systems, IT security, and other IT systems), perform external audit assurance activities, and perform service organization control services activities related to SSAE18 SOC 1 and SOC 2 reporting services Performing risk analysis by reviewing the information security policy documents against industry standards/ regulatory requirements and drafting risk reports, which summarize the information security assessment including any risks to the organization Execute components of IT audits under offshore delivery model in an effective and efficient manner Use problem solving and critical thinking skills to quickly identify internal control deficiencies, evaluate their risk implications, and draw the appropriate conclusions to best advise our clients Exercise professional skepticism, judgment and adhere to the code of ethics while on engagements Ensure that documentation is compliant with quality standards of the firm Work collaboratively as a part of the team and communicate effectively with RSM consulting professionals, supervisors, and senior management in the U.S. on a daily basis Manage multiple concurrent engagements and ensure service excellence through prompt responses to internal and external clients Provide timely, high quality client service that meets or exceeds client expectations including coordinating the development and execution of the consulting work plan and client deliverables Understand RSM US and RSM Delivery Center's LOB’s and work as a team in providing an integrated service delivery Ensure professional development through ongoing education Open to work on other solution sets considering business requirements. Qualifications B.Tech/MCA/MBA with ISO 27001 Lead Auditor and up to 2 years of relevant experience in Information Security Controls, SSAE 18, SOC reports, IT Audits, IT General Controls, and IT Application Controls. Candidate should have intermediate knowledge of financials, operations and technology and its related risks Candidate should have good knowledge for SOC 1, SOC 2, IT General Controls, IT Application Controls, Information security and risk management frameworks/ standards (ISO 27001, NIST, COBIT, ITIL etc.) Qualified to pursue a job-relevant certification (CIA, CISA, CISM, CRISC, CISSP) Strong Data Analytical skills including advanced Excel skills (Vlookups, pivot tables, and basic formulas), Word and PowerPoint MS Visio skills to develop process and data flow diagrams Strong multi-tasking and project management skills Excellent verbal and written communication (English) as the position requires frequent communications with RSM International clients At RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients. Learn more about our total rewards at https://rsmus.com/careers/india.html. RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Indian Armed Forces; Indian Armed Forces Veterans, and Indian Armed Forces Personnel status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please send us an email at careers@rsmus.com.

Posted 2 days ago

Apply

14.0 years

0 Lacs

Bengaluru, Karnataka

On-site

GE Healthcare Healthcare Information Technology Category Digital Technology / IT Senior Level Job Id R4027329 Relocation Assistance No Location Bengaluru, Karnataka, India, 560066 Job Description Summary Leverages deep technology, process and domain expertise to drive execution across multiple interdependent projects within a program; ensures outcomes delivery on time, within scope and budget and of desired quality. Defines execution standards and processes to be followed by all project managers within the program or department. About the Global Workload Services team: our mission is to deliver secure, resilient and innovative global workload services that enable our business to create a world where healthcare has no limits. Our vision is to be the leading provider of innovative infrastructure technology solutions and services that will support our business growth, enhance user experience and streamline operations. We will design and deliver cost effective, secure and forward-looking solutions through innovative cloud, server and storage technologies globally. GE HealthCare, a leading global innovator in medical technology and digital solutions, is committed to improving lives during critical moments. Join us to unlock your ambition, transform ideas into impactful realities, and contribute to a healthier world where every voice matters and every difference makes a difference. Job Description Roles and Responsibilities In this role, you will: Collaborate with business and functional partners and technology leadership in defining functionality and specifying requirements Outline multi-generational project strategy aligned to deliver on the expected outcomes Define execution methodologies and project management practices to be followed by all projects within the program. Organize project teams comprising from internal and external technical and functional experts based on budget, scope and timeline Manage day-to-day execution of multiple interdependent projects by working directly with global technical teams Coordinate execution across multiple projects and drive shared approach and outcomes tracking Support execution team with resolution of roadblocks and interdependencies. Partner with technical and functional teams external to the project to ensure their tasks are completed as required Manage project risks, scope changes and other non-standard events throughout the life of the project Manage stakeholder communication and progress reporting at various levels of the organization including leadership and executives Ensure quality of deliverables is verified and matching stakeholder expectations Track project outcomes realization and customer satisfaction levels through established metrics against service level. Ensure lessons learned are collected Perform initial and final financial reviews, and ensure ongoing budget tracking Key Responsibilities: Resilience Management: Develop, implement, and maintain enterprise-wide Disaster Recovery (DR) strategies across IT, Infrastructure and Manufacturing. Lead resilience assessments , risk analysis, and impact evaluations across business units & Manufacturing Sites Coordinate and execute resilience testing and simulation exercises for Enterprise & Manufacturing Domains Partner with IT, cybersecurity, facilities, and business units to ensure alignment of resilience strategies. Monitor regulatory requirements and industry standards (e.g., ISO 22301, NIST, FFIEC) and ensure compliance. Project Management: Lead cross-functional projects from initiation through delivery using Agile, Waterfall, or hybrid methodologies . Define project scope, goals, deliverables, timelines, and resource requirements. Manage project risks, issues, and dependencies, ensuring timely resolution and escalation. Track and report project performance using appropriate tools and KPIs. Facilitate stakeholder communication and ensure alignment with strategic objectives. Education Qualification Bachelor’s degree in Business, Engineering, Information Systems, or a related field (Master’s preferred) with 14+ years of overall experience. Desired Characteristics Proven experience using project management methodologies to deliver business value and drive significant change across an organization Experience managing budgets including budget and spend Excellent understanding and knowledge of various project and portfolio management methodologies with track record of implementing shared standards for large organizations Excellent leadership skills with ability to influence outcomes and organize teams to attain shared goals Excellent influencing, interpersonal and communications skills (both written and verbal) with all levels of an organization Self-starter - requires minimal direction to accomplish goals Demonstrated customer focus – evaluates decisions through the eyes of the customer, builds strong customer relationships, creates processes with customer viewpoint and partners with customers to help shape their future initiatives Good analytical and strong problem solving skills -communicates in a clear and succinct manner and effectively evaluates information / data to make decisions, anticipates obstacles and develops plans to resolve, creates actionable strategies and operational plans Change oriented – actively generates process improvements, champions and drives change initiatives, confronts difficult circumstances in creative ways, balances multiple and competing priorities and executes accordingly PMP, ScrumMaster or related Project Management certifications Inclusion and Diversity GE HealthCare is an Equal Opportunity Employer where inclusion matters. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law. We expect all employees to live and breathe our behaviors: to act with humility and build trust; lead with transparency; deliver with focus, and drive ownership – always with unyielding integrity. Our total rewards are designed to unlock your ambition by giving you the boost and flexibility you need to turn your ideas into world-changing realities. Our salary and benefits are everything you’d expect from an organization with global strength and scale, and you’ll be surrounded by career opportunities in a culture that fosters care, collaboration and support. #LI-RS1 #Hybrid Additional Information Relocation Assistance Provided: No

Posted 2 days ago

Apply

0.0 years

0 Lacs

Delhi

On-site

Job requisition ID :: 87057 Date: Jul 31, 2025 Location: Delhi Designation: Deputy Manager Entity: Deloitte Touche Tohmatsu India LLP Your potential, unleashed. India’s impact on the global economy has increased at an exponential rate and Deloitte presents an opportunity to unleash and realise your potential amongst cutting edge leaders, and organisations shaping the future of the region, and indeed, the world beyond. At Deloitte, your whole self to work, every day. Combine that with our drive to propel with purpose and you have the perfect playground to collaborate, innovate, grow, and make an impact that matters. The team Cyber is about much more than just the numbers. It’s about attesting to accomplishments and challenges and helping to assure strong foundations for future aspirations. Deloitte exemplifies the what, how, and why of change so you’re always ready to act ahead. Learn more about Cyber Practice Your work profile As a Deputy Manager in our Cyber - CST Team you’ll build and nurture positive working relationships with teams and clients with the intention to exceed client expectations, your role would involve the following: Role Description – Lead the end-to-end third-party risk assessment process including initial due diligence, onboarding, and periodic reviews. Collaborate and lead discussions with various departments from client’s team including Legal, IT Security, Procurement, and Business Units to ensure comprehensive risk coverage. Lead engagement team in delivering client engagements and assist delivery team members during engagements Develop and maintain the TPRM framework, policies, and procedures in line with industry best practices and regulatory expectations. Prepare and present risk reports, dashboards, and metrics to senior management and risk committees. Act as a subject matter expert during third-party risk assessments, with expertise in regulatory and compliance frameworks such as ISO 27001, SOC 2, NIST, GDPR, and RBI Guidelines, PCI DSS etc. Perform quality reviews of work performed by team members Should be able to work independently on short term engagements Support Managers/AD/D in assessment/ audit execution, reporting, quality review and tracking Support Managers/AD/D in responding to RFP, proposals and new opportunities of business development Provide ongoing improvement opportunities including automation of third-party assessment execution Flexible to step-in and perform work on ground such as conducting risk assessments and audits with respect to people, process and technology Desired qualifications 6+ Relevant years of experience in Third party risk management Relevant years of experience in IT Audits, Cloud security assessment Experience with ISO22301, 27001 implementation and audits Preferred certifications CBCI / CBCP / ISO22301 LI or LA Offensive Security Certified Professional, CISA to work in a cross-functional, cross-cultural matrix environment Understanding of Third party/vendor/supplier risk management considerations Knowledge of Data Protection & Privacy related risks associated with Third-Party and relevant control frameworks for Third party risk management Excellent written/verbal communication Excellent documentation and presentation skills Highly motivated and willing to work in local and global environments Security certifications like CISSP, CISA, CISM, CEH, ISO27001 Work experience in Infrastructure / Application Security Work experience in IT Audit Work experience in Information Risk Management Location and way of working Base location: Gurgaon This profile involves WFO 5 days a week Your role as a Deputy Manager We expect our people to embrace and live our purpose by challenging themselves to identify issues that are most important for our clients, our people, and for society. In addition to living our purpose, DM across our organization must strive to be: Inspiring - Leading with integrity to build inclusion and motivation Committed to creating purpose - Creating a sense of vision and purpose Agile - Achieving high-quality results through collaboration and Team unity Skilled at building diverse capability - Developing diverse capabilities for the future Persuasive / Influencing - Persuading and influencing stakeholders Collaborating - Partnering to build new solutions Delivering value - Showing commercial acumen Committed to expanding business - Leveraging new business opportunities Analytical Acumen - Leveraging data to recommend impactful approach and solutions through the power of analysis and visualization Effective communication – Must be well abled to have well-structured and well-articulated conversations to achieve win-win possibilities Engagement Management / Delivery Excellence - Effectively managing engagement(s) to ensure timely and proactive execution as well as course correction for the success of engagement(s) Managing change - Responding to changing environment with resilience Managing Quality & Risk - Delivering high quality results and mitigating risks with utmost integrity and precision Strategic Thinking & Problem Solving - Applying strategic mindset to solve business issues and complex problems Tech Savvy - Leveraging ethical technology practices to deliver high impact for clients and for Deloitte Empathetic leadership and inclusivity - creating a safe and thriving environment where everyone's valued for who they are, use empathy to understand others to adapt our behaviours and attitudes to become more inclusive. How you’ll grow Connect for impact Our exceptional team of professionals across the globe are solving some of the world’s most complex business problems, as well as directly supporting our communities, the planet, and each other. Know more in our Global Impact Report and our India Impact Report. Empower to lead You can be a leader irrespective of your career level. Our colleagues are characterised by their ability to inspire, support, and provide opportunities for people to deliver their best and grow both as professionals and human beings. Know more about Deloitte and our One Young World partnership. Inclusion for all At Deloitte, people are valued and respected for who they are and are trusted to add value to their clients, teams and communities in a way that reflects their own unique capabilities. Know more about everyday steps that you can take to be more inclusive. At Deloitte, we believe in the unique skills, attitude and potential each and every one of us brings to the table to make an impact that matters. Drive your career At Deloitte, you are encouraged to take ownership of your career. We recognise there is no one size fits all career path, and global, cross-business mobility and up / re-skilling are all within the range of possibilities to shape a unique and fulfilling career. Know more about Life at Deloitte. Everyone’s welcome… entrust your happiness to us Our workspaces and initiatives are geared towards your 360-degree happiness. This includes specific needs you may have in terms of accessibility, flexibility, safety and security, and caregiving. Here’s a glimpse of things that are in store for you. Interview tips We want job seekers exploring opportunities at Deloitte to feel prepared, confident and comfortable. To help you with your interview, we suggest that you do your research, know some background about the organisation and the business area you’re applying to. Check out recruiting tips from Deloitte professionals.

Posted 2 days ago

Apply

0 years

0 Lacs

Pune, Maharashtra, India

On-site

About ACA: ACA Group is the leading governance, risk, and compliance (GRC) advisor in financial services. We empower our clients to reimagine GRC and protect and grow their business. Our innovative approach integrates consulting, managed services, and our ComplianceAlpha® technology platform with the specialized expertise of former regulators and practitioners and our deep understanding of the global regulatory landscape. Position Summary The IT Security Systems Administrator is responsible for the implementation and ongoing management of the security related technology systems utilized by ACA Group (“ACA”). This position needs to understand the IT vision and work towards realizing it. Individual would be responsible for finding ways to apply departmental new ideas into their daily work. This position needs a self-starter who works to improve their own effectiveness as well as provides ad-hoc suggestions for broader improvements for IT Security Systems. Execution of assigned tasks on time and on quality with some oversight and assistance from others. Job Duties Identify gaps, vulnerabilities, exploits, and patches in IT controls in order to generate issue lists and mitigation recommendations Execute ongoing testing and gap analysis of information security-related policies, practices, and procedures, and perform tasks related to monitoring IT infrastructure according to established guidelines Handle and delegate as necessary the tracking of periodic reviews, audits, and updates Assist with maintenance of back-end technology systems such as Server Hosts, Backup Software, Networking, and Security Systems 5. Assist with conducting technical reviews of ACA’s IT systems and audit security controls. Analyze IT audit submissions and related documentation, and align responses with various risk frameworks (e.g., COBIT, NIST, SANS) Assist with the research, review, development, and/or enhancement of information security policies and technical risk documentation, as well as white paper content and/or training programs Assist with creating content for cybersecurity and IT-risk related email alerts Assist with the design and production of phishing campaign email templates Assist with content generation for end user information security training Handle escalations from the 1st/2nd line support Identify, map, and diagram data flow and processes Perform ad-hoc work/special projects as necessary to support ACA on various client and internal initiatives Preferred Education And Experience Relevant cybersecurity professional certification (e.g., ISC(2), SANS GSEC/GICSP, ISACA, Offensive Security OSCP/OSCE) 4-7yrs of an experience is required Required Skills And Attributes Demonstrated professional integrity Dependable, flexible, and adaptable to new ACA initiatives and changing client needs Ability to work well in a fast-paced, small-team environment Ability to work independently, multi-task and prioritize effectively Ability to establish and maintain effective working relationships with colleagues and clients Highly motivated and goal oriented; proactive in one’s own education and career progression; volunteers for and shows initiative on both internal and external projects and tasks Dedicated to upholding ACA’s high-quality standards and customer service focus Strong organizational and problem-solving skills with attention to detail Strong oral and written communication skills What working at ACA offers: We offer a competitive compensation package where you’ll be rewarded based on your performance and recognized for the value you bring to our business. Our Total Rewards package includes medical coverage fully funded by ACA for employees and their family as well as access to Maternity & Fertility and Wellness programs. ACA also provides Personal Accident Insurance, Group Term Life Insurance, Employee Discount programs and Employee Resource Groups. You’ll be granted time off for designated ACA Paid Holidays, Privilege Leave, Casual/Sick Leave, and other leaves of absence to support your physical, financial and emotional well-being. About ACA: ACA Group is the leading governance, risk, and compliance (GRC) advisor in financial services. We empower our clients to reimagine GRC and protect and grow their business. Our innovative approach integrates consulting, managed services, and our ComplianceAlpha® technology platform with the specialized expertise of former regulators and practitioners and our deep understanding of the global regulatory landscape. What we commit to: ACA is firmly committed to a policy of nondiscrimination, which applies to recruiting, hiring, placement, promotions, training, discipline, terminations, layoffs, transfers, leaves of absence, compensation and all other terms and conditions of employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected status.

Posted 2 days ago

Apply

0 years

0 Lacs

Gurgaon, Haryana, India

On-site

Job Description KPMG in India, a professional services firm, is the Indian member firm affiliated with KPMG International and was established in September 1993. Our professionals leverage the global network of firms, providing detailed knowledge of local laws, regulations, markets, and competition. KPMG has offices across India in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, and Vadodara. KPMG in India offers services to national and international clients in India across sectors. We strive to provide rapid, performance-based, industry-focused, and technology-enabled services, which reflect a shared knowledge of global and local industries and our experience of the Indian business environment KPMG Advisory professionals provide advice and assistance to enable companies, intermediaries, and public sector bodies to mitigate risk, improve performance, and create value. KPMG firms provide a wide range of Risk Advisory and Financial Advisory Services that can help clients respond to immediate needs as well as put in place the strategies for the longer term. Projects in IT Advisory focus on the assessment and/or evaluation of IT systems and the mitigation of IT-related business risks. They are either IS audit, SOX reviews, Internal audit engagements, IT infrastructure review and/or risk advisory including but not limited to IT audit supports in nature. Responsibilities Requirement Functional Knowledge: Significant Know How of various domains under Governance & Management of Enterprise IT, Financial Statements - IT Audit Process & Integrated Audits, Leading IT Risk Management Frameworks & Standards ( such as COBIT, COSO, ITIL, ISO 27001, NIST etc.) Core Technical Skills: Hands on experience in executing and delivering audits/assurance engagements (At least in 2-3 areas) of IT General Controls around Applications, Database, Operating Systems, Middleware, Networks, IT Application Controls, IT Attestation (SOC1SOC 2 etc.), IT Regulatory Compliance, Third Party Risk Assurance etc. Additional Skills: Understanding of at Technology Risks & Controls for at least one of Emerging Technology solutions such as Cloud, Social Media, Intelligent Automation, DevSecOps etc. Professionals would be leading at least 3-5 projects at any time on IT Audit & Controls Assurance. They shall be having teams report to them at a project level. Professional have the responsibility of project execution and shall report to a director/partner on every project. They shall be responsible for ensuring project profitability, quality as well as adherence to the agreed project plan Will have End to End responsibility of managing the project lifecycle from Initiation till Closure and maintain requisite documentation at each stage. Professionals shall assist the Partner/Director in managing quality & risks associated with the projects The job would require travel to client locations within India and abroad Certifications such as CISA, CISSP, CIA, SAP/Oracle Securityand related certifications in the areas of Emerging Technologies would be plus. Responsibilities for Internal Candidates Provide high quality, day-to-day execution of client engagements, and projects for the financial services practice Develop engagement work programs, assist in conducting risk assessments, documentation of working papers and preparation of audit committee presentations Shall be responsible for client relationship management, team management along with ability to handle multiple client engagements Understand client needs and challenges and identify revenue opportunities for the firm Work on project teams focused on advisory projects and assist engagement management to successfully complete engagement objectives Understand firm service offerings and mentor associates, interns, and new hires. Qualification QUALIFICATIONS Possesses extensive experience in IT Audit, IT Risk & Control Assurance space Prior experience in client facing / account management roles Exposure to business development in consulting (Pre-sales support, proposals, RFP responses) Possess strong domain knowledge, understanding of business processes and possible risks in operations of at least two industry sectors Consistent display of leadership skills Have experience in process consulting/ internal audit/ risk consulting at a project professional level role Strong analytical and problem solving skills. Strong written and verbal communication skills Ability to work well in teams Equal Employment Opportunity Information KPMG India has a policy of providing equal opportunity for all applicants and employees regardless of their color, caste, religion, age, sex/gender, national origin, citizenship, sexual orientation, gender identity or expression, disability or other legally protected status. KPMG India values diversity and we request you to submit the details below to support us in our endeavor for diversity. Providing the below information is voluntary and refusal to submit such information will not be prejudicial to you.

Posted 2 days ago

Apply

8.0 - 12.0 years

0 Lacs

karnataka

On-site

You are hiring a Manager for GCP Migration & Infrastructure based in Bangalore within the Cloud Engineering Consulting Practice department. The ideal candidate should have 9-12 years of experience and will be responsible for leading large-scale cloud migration and infrastructure transformation projects on Google Cloud Platform (GCP), with expertise in GKE, GCVE, VMware to GCVE migrations, and landing zone architecture. This client-facing role involves hands-on delivery, technical leadership, and cross-functional collaboration. Your key responsibilities will include leading VMware to GCVE migration initiatives with minimal disruption, designing secure and scalable GCP landing zones, deploying and managing GKE clusters for containerized apps, and architecting secure VPCs, firewalls, and hybrid connectivity. You will also be responsible for implementing IAM, RBAC, and data protection frameworks, ensuring regulatory compliance, and collaborating with cloud, security, and client teams to align on strategy. As a Manager, you will guide engineering teams through deployment and migration phases, develop detailed technical documentation and runbooks, and provide support for presales activities including solution design, effort estimation, and proposals. You will also participate in client workshops to gather requirements and pitch solutions. To qualify for this role, you should have 8-10 years of IT experience, with at least 3-5 years focused on GCP cloud migration. Strong experience in GCVE, GKE, VMware migrations, and landing zone design is required, along with a deep understanding of GCP networking, IAM, firewalls, and security best practices. GCP certifications such as Professional Cloud Architect, Security Engineer, or Network Engineer are preferred.,

Posted 3 days ago

Apply

10.0 years

0 Lacs

Hyderabad, Telangana, India

On-site

Job Title: Calibration Engineer Location: Hyderabad, India Experience: 10+ Years Industry: Medical Devices / Pharmaceuticals Job Overview: We are seeking a senior Calibration Engineer with 10+ years of experience in regulated environments such as medical devices, pharmaceuticals, or diagnostics. The ideal candidate will not only be technically proficient in calibration and metrology but also capable of training and mentoring engineers and technicians on calibration best practices, quality system compliance, and equipment management. This role requires deep hands-on expertise with electrical and mechanical calibration systems, along with strong knowledge of regulatory standards (FDA 21 CFR Part 820, ISO 13485, ANSI/NCSL Z540.3, and ISO 17025). The successful candidate will design and deliver structured training programs while overseeing calibration activities across production, R&D, and testing environments. Key Responsibilities: Lead calibration of medical and lab equipment, ensuring NIST-traceable accuracy across pressure, flow, temperature, force, and electronic measurement devices. Develop and deliver structured training modules to upskill calibration technicians and junior engineers on instrumentation, metrology, and compliance. Draft and maintain calibration procedures, SOPs, and related quality documentation. Ensure regulatory compliance with ISO 13485, FDA QSR, and internal audit readiness. Oversee calibration schedules, documentation, and asset control using CMMS tools (e.g., Blue Mountain, ProCal). Perform statistical analysis (MSA, uncertainty budgets) and root cause investigations for out-of-tolerance (OOT) events. Provide hands-on support for validation/verification activities (IQ/OQ/PQ) and support regulatory inspections. Key Skills & Tools: Strong proficiency with calibration instruments : Fluke calibrators, signal generators, oscilloscope, pressure calibrators, multimeters, temperature baths. Deep understanding of electromechanical systems , loop calibration, instrumentation, and automation control. Familiarity with GAMP 5 , risk-based validation, and good documentation practices. Knowledge of safety standards such as NFPA 70E , NEC , and IEC 61010 . Skilled in CMMS tools and documentation systems. Qualifications: Bachelor’s or Master’s degree in Electrical, Electronics, Biomedical, or Instrumentation Engineering. 10+ years in calibration engineering within the medical device or life sciences industry . Experience in a trainer or mentoring capacity is essential. ASQ-CCT or ISO 17025 internal auditor certification is a plus. Strong communication skills to support cross-functional training and documentation.

Posted 3 days ago

Apply

3.0 years

0 Lacs

Gurugram, Haryana, India

Remote

Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : Palo Alto Networks Firewalls Good to have skills : NA Minimum 3 Year(s) Of Experience Is Required Educational Qualification : 15 years full time education Summary: We are seeking a highly skilled Senior Network Security Engineer with proven experience in enterprise-grade security technologies including Palo Alto firewalls, IDS/IPS systems, VPN, WAF (Imperva), Cequence Bot Defense, Cloudflare DNS security, and Illumio Zero Trust microsegmentation. The ideal candidate will be responsible for designing, implementing, and maintaining network security controls to protect enterprise infrastructure, applications, and data from advanced cyber threats. Roles & Responsibilities: -Configure, deploy, and maintain Palo Alto Networks firewalls, including threat prevention, URL filtering, and App-ID policies. -Manage and monitor intrusion detection and prevention systems (IDS/IPS) for threat detection and response. -Configure and maintain VPN solutions (GlobalProtect or other IPsec/SSL-based systems) for secure remote access. -Analyze logs and events for unusual activity and support incident investigations. -Automate and optimize firewall rules and network segmentation for least-privilege access. -Deploy and manage Cequence Bot Defense for API security and bot mitigation. -Analyze bot traffic patterns and implement policies to block malicious automation. -Work with DevOps and application teams to integrate Cequence with key digital assets. -Configure and monitor Cloudflare DNS security services including threat blocking, filtering, and DoS mitigation. -Implement policies for DNS-layer protection and content filtering. -Ensure availability and resiliency of DNS infrastructure through Cloudflare edge network. -Implement and administer Illumio Zero Trust Segmentation for workload isolation and application-level segmentation. -Design and enforce microsegmentation policies to restrict lateral movement and reduce attack surface. -Continuously assess traffic flows to identify over-permissive access and optimize segmentation models. -Deploy and manage Imperva WAF to protect critical web applications from OWASP Top 10 and other application-level attacks. -Tune WAF rules to reduce false positives while maintaining effective security posture. -Work with application teams to ensure secure deployment pipelines and integrate security testing. Professional & Technical Skills: - Must To Have Skills: Proficiency in Palo Alto Networks Firewalls. - Strong understanding of cloud security principles and best practices. - Experience with security compliance frameworks such as ISO 27001, NIST, or CIS. - Familiarity with identity and access management solutions. - Knowledge of incident response and threat management processes. -Collaborate with SOC, DevOps, Infrastructure, and Application Security teams to improve detection and response. -Maintain security documentation, configuration baselines, and change control records. -Assist in incident response and forensic analysis during security events. -Stay current with emerging threats and recommend appropriate security controls. -Security certifications such as PCNSE, CCNP Security, GIAC (GCFW, GCIA), CISSP, or CEH. -Experience with REST APIs, automation/scripting (Python, Ansible), and infrastructure-as-code. -Understanding of Zero Trust architecture and NIST 800-207 principles -Rxperience in cybersecurity operations, with a focus on network and perimeter security. - Hands-on experience managing enterprise firewalls, preferably Palo Alto. - Experience in Bot protection and DNS security, including tools like Cequence and Cloudflare. -Proven track record in troubleshooting complex firewall and VPN issues in large-scale environments. -Experience conducting firewall audits, rule reviews, and implementing policy enhancements. -Demonstrated ability to manage incident response and change management processes. -Experience working in a global delivery model and collaborating with cross-functional teams. -Strong analytical and problem-solving skills with a continuous improvement mindset. Additional Information: - The candidate should have minimum 3 years of experience in Palo Alto Networks Firewalls. - This position is based at our Gurugram office. - A 15 years full time education is required.

Posted 3 days ago

Apply

8.0 - 10.0 years

0 Lacs

Bengaluru, Karnataka, India

On-site

Job Description Job Description Role: Audit & Complaince Location: Bangalore Full/ Part time: Full time Build a career with confidence Carrier Global Corporation, global leader in intelligent climate and energy solutions is committed to creating solutions that matter for people and our planet for generations to come. From the beginning, we&aposve led in inventing new technologies and entirely new industries. Today, we continue to lead because we have a world-class, diverse workforce that puts the customer at the center of everything we do About The Role We are seeking a highly skilled and experienced DT Compliance Lead to join our team, within Cyber Security function in Carrier, the ideal candidate will have a strong background in IT audits, compliance, and risk management. This is an individual contributor role that requires a proactive and detail-oriented professional to manage and support various compliance and audit activities. The individual will be responsible for governance and oversight of enterprise-wide SOX IT control program to mitigate the risk of material omissions, errors or weaknesses in our technology and security controls. The position requires a combination of strong program management and leadership skills, along with broad technical knowledge and subject-matter expertise in IT audits and compliance. This individual will be responsible for managing SOX compliance expectations with our key stakeholders including control owners, senior/executive management, and internal/external auditors. Key Responsibilities Oversee program management for all activities including planning, scoping, audit fieldwork, issue identification, reporting, and remediation of issues. Develop an intimate understanding of Carriers business processes and the role of technology in meeting business objectives including key IT processes, automations, reports, data flows, and interfaces. Maintain SOX IT documentation, liaise with internal and external auditors, and provide guidance and support to technology control owners on control design, audit requirements, and issue remediation. Conduct internal audits to assess the effectiveness of internal controls and compliance with policies and regulations. Coordinate and support external audits, including providing necessary documentation and information. Evaluate IT control deficiencies for impact and perform root cause analysis to determine appropriate management actions. Monitor managements remediation efforts to closure, including review of supporting evidence. Serve as subject matter expert and advise on the SOX compliance implications of technology related changes to the business such as new product lines, new system implementations etc. Develop a continuous monitoring program with an emphasis IT controls automation. Develop metrics, reporting and dashboards to track SOX IT control effectiveness and ensure process efficiency, and that risks are being appropriately tracked, communicated and managed. Continually identify opportunities to benchmark controls, automate control testing and streamline manual efforts to increase efficiency and reduce cycle times. Stay current on new technical literature applicable to the internal control process (e. g., PCAOB guidance, SEC, COSO, COBIT, etc.) and maintain awareness of emerging trends and best practices around technology and security controls. Successfully partner with and manage executive level stakeholders, PMOs & Working Groups with Domestic & International cross-functional teams. Create and deliver DT SOX Compliance training materials to key stakeholders. Provide guidance and support to other teams on compliance-related matters. Prepare and present reports on compliance activities and findings to senior management. Requirment Minimum 8-10 years of experience in IT audits, compliance, and risk management. Full-time Bachelors degree in IT, Computer Science or equivalent. Certifications such as CISA, CISM, or CISSP or similar professional certifications are highly desirable. Demonstrated success and understanding of accepted frameworks such as, ISO/IEC 27001, COBIT, and NIST, including 800-53 and the Cybersecurity Framework. Advanced knowledge of SOX IT requirements, COSO/CoBIT framework and PCAOB standards, and in-depth experience with testing general IT and application controls, segregation of duties (SoD) rules, reports and interfaces. ServiceNow GRC preferred. Excellent analytical and problem-solving skills. Excellent written and verbal communication skills, strong interpersonal skills and the ability to communicate technical concepts effectively across functions and all levels of management. Highly motivated self-starter with a meticulous attention to detail and bias to action, who is eager to put his/her stamp on our rapidly increasing compliance footprint. Ability to work independently and manage multiple priorities. Detail-oriented with a high level of accuracy., or accounting. Key Attributes Forward-thinking mindset with strong digital acumen. Ability to collaborate across business, legal, and engineering functions. Strong sense of ethics, accountability, and customer trust. Excellent communication and stakeholder influence capabilities. Benefits We are committed to offering competitive benefits programs for all of our employees, and enhancing our programs when necessary. Make yourself a priority with flexible schedules, parental leave Drive forward your career through professional development opportunities Achieve your personal goals with our Employee Assistance Programme Our commitment to you Our greatest assets are the expertise, creativity and passion of our employees. We strive to provide a great place to work that attracts, develops and retains the best talent, promotes employee engagement, fosters teamwork and ultimately drives innovation for the benefit of our customers. We strive to create an environment where you feel that you belong, with diversity and inclusion as the engine to growth and innovation. We develop and deploy best-in-class programs and practices, providing enriching career opportunities, listening to employee feedback and always challenging ourselves to do better. This is The Carrier Way. Join us and make a difference. Apply Now! Carrier is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class. Job Applicant&aposs Privacy Notice Click on this link to read the Job Applicant&aposs Privacy Notice Show more Show less

Posted 3 days ago

Apply

8.0 - 10.0 years

0 Lacs

Bengaluru, Karnataka, India

On-site

Job Description Job Description Role: Audit & Complaince Location: Bangalore Full/ Part time: Full time Build a career with confidence Carrier Global Corporation, global leader in intelligent climate and energy solutions is committed to creating solutions that matter for people and our planet for generations to come. From the beginning, we&aposve led in inventing new technologies and entirely new industries. Today, we continue to lead because we have a world-class, diverse workforce that puts the customer at the center of everything we do About The Role We are seeking a highly skilled and experienced DT Compliance Lead to join our team, within Cyber Security function in Carrier, the ideal candidate will have a strong background in IT audits, compliance, and risk management. This is an individual contributor role that requires a proactive and detail-oriented professional to manage and support various compliance and audit activities. The individual will be responsible for governance and oversight of enterprise-wide SOX IT control program to mitigate the risk of material omissions, errors or weaknesses in our technology and security controls. The position requires a combination of strong program management and leadership skills, along with broad technical knowledge and subject-matter expertise in IT audits and compliance. This individual will be responsible for managing SOX compliance expectations with our key stakeholders including control owners, senior/executive management, and internal/external auditors. Key Responsibilities Oversee program management for all activities including planning, scoping, audit fieldwork, issue identification, reporting, and remediation of issues. Develop an intimate understanding of Carriers business processes and the role of technology in meeting business objectives including key IT processes, automations, reports, data flows, and interfaces. Maintain SOX IT documentation, liaise with internal and external auditors, and provide guidance and support to technology control owners on control design, audit requirements, and issue remediation. Conduct internal audits to assess the effectiveness of internal controls and compliance with policies and regulations. Coordinate and support external audits, including providing necessary documentation and information. Evaluate IT control deficiencies for impact and perform root cause analysis to determine appropriate management actions. Monitor managements remediation efforts to closure, including review of supporting evidence. Serve as subject matter expert and advise on the SOX compliance implications of technology related changes to the business such as new product lines, new system implementations etc. Develop a continuous monitoring program with an emphasis IT controls automation. Develop metrics, reporting and dashboards to track SOX IT control effectiveness and ensure process efficiency, and that risks are being appropriately tracked, communicated and managed. Continually identify opportunities to benchmark controls, automate control testing and streamline manual efforts to increase efficiency and reduce cycle times. Stay current on new technical literature applicable to the internal control process (e. g., PCAOB guidance, SEC, COSO, COBIT, etc.) and maintain awareness of emerging trends and best practices around technology and security controls. Successfully partner with and manage executive level stakeholders, PMOs & Working Groups with Domestic & International cross-functional teams. Create and deliver DT SOX Compliance training materials to key stakeholders. Provide guidance and support to other teams on compliance-related matters. Prepare and present reports on compliance activities and findings to senior management. Requirment Minimum 8-10 years of experience in IT audits, compliance, and risk management. Full-time Bachelors degree in IT, Computer Science or equivalent. Certifications such as CISA, CISM, or CISSP or similar professional certifications are highly desirable. Demonstrated success and understanding of accepted frameworks such as, ISO/IEC 27001, COBIT, and NIST, including 800-53 and the Cybersecurity Framework. Advanced knowledge of SOX IT requirements, COSO/CoBIT framework and PCAOB standards, and in-depth experience with testing general IT and application controls, segregation of duties (SoD) rules, reports and interfaces. ServiceNow GRC preferred. Excellent analytical and problem-solving skills. Excellent written and verbal communication skills, strong interpersonal skills and the ability to communicate technical concepts effectively across functions and all levels of management. Highly motivated self-starter with a meticulous attention to detail and bias to action, who is eager to put his/her stamp on our rapidly increasing compliance footprint. Ability to work independently and manage multiple priorities. Detail-oriented with a high level of accuracy., or accounting. Key Attributes Forward-thinking mindset with strong digital acumen. Ability to collaborate across business, legal, and engineering functions. Strong sense of ethics, accountability, and customer trust. Excellent communication and stakeholder influence capabilities. Benefits We are committed to offering competitive benefits programs for all of our employees, and enhancing our programs when necessary. Make yourself a priority with flexible schedules, parental leave Drive forward your career through professional development opportunities Achieve your personal goals with our Employee Assistance Programme Our commitment to you Our greatest assets are the expertise, creativity and passion of our employees. We strive to provide a great place to work that attracts, develops and retains the best talent, promotes employee engagement, fosters teamwork and ultimately drives innovation for the benefit of our customers. We strive to create an environment where you feel that you belong, with diversity and inclusion as the engine to growth and innovation. We develop and deploy best-in-class programs and practices, providing enriching career opportunities, listening to employee feedback and always challenging ourselves to do better. This is The Carrier Way. Join us and make a difference. Apply Now! Carrier is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class. Job Applicant&aposs Privacy Notice Click on this link to read the Job Applicant&aposs Privacy Notice Show more Show less

Posted 3 days ago

Apply

4.0 - 6.0 years

0 Lacs

Gurgaon, Haryana, India

Remote

Company Overview:? Leading with our core values of Quality, Integrity, and Opportunity, MedInsight is one of the healthcare industrys most trusted solutions for healthcare intelligence.?Our company purpose is to empower easy, data-driven decision-making on important healthcare questions. Through our products, education, and services, MedInsight is making an impact on healthcare by helping to drive better outcomes for patients while reducing waste. Over 300 leading healthcare organizations have come to rely on MedInsight analytic solutions for healthcare cost and care management. MedInsight has been ranked #1 for Payer Quality Analytics by clients for the last three years in the Best in KLAS report.?? MedInsight is a subsidiary of Milliman; a global, employee-owned consultancy providing actuarial consulting, retirement funding and healthcare financing, enterprise risk management and regulatory compliance, data analytics and business transformation as well as a range of other consulting and technology solutions.? Position Summary:? As a Penetration Tester, you will play a vital role in safeguarding our information systems by proactively identifying and mitigating security vulnerabilities. Working under the guidance of senior security professionals, you will assess the effectiveness of our cybersecurity infrastructure through simulated attacks and vulnerability assessments. This role offers the opportunity to build hands-on experience while contributing to the design and implementation of secure systems and processes. Key Responsibilities:? Conduct penetration tests on networks, web and mobile applications, APIs, and cloud environments to identify security vulnerabilities and risks. Support security architects in assessing potential weaknesses in system designs and contribute to defining secure architecture and infrastructure requirements. Identify and exploit vulnerabilities in applications and infrastructure to simulate real-world cyber threats. Facilitate and coordinate vulnerability assessments and scans, review assessment results, and oversee remediation activities for network and infrastructure devices. Document and communicate findings clearly, translating technical risk into business risk for non-technical stakeholders. Participate in educating users and new employees on security best practices, policies, and procedures. Research and stay current on emerging cybersecurity threats, attack methods, and industry best practices. Recommend improvements to enhance system security and align with internal standards and regulatory requirements. Ensure testing activities and remediation efforts align with compliance standards and privacy laws (e.g., OWASP, NIST, ISO 27001). Collaborate with senior team members to provide technical guidance and support for security initiatives. May assist in reviewing third-party security controls, especially for cloud services. Qualifications:? Minimum 4 years of experience in Application Security and Penetration Testing across networks, web/mobile apps, APIs, and cloud environments to identify vulnerabilities and risks. Familiarity with penetration testing methodologies, tools (e.g., Burp Suite, Nmap, Metasploit), and scripting languages (e.g., Python, Bash, PowerShell). Basic understanding of networking protocols, web technologies, and operating systems. Exposure to cybersecurity frameworks such as OWASP Top 10, NIST, or CIS Controls. Strong problem-solving skills, attention to detail, and ability to work as part of a team. Willingness to learn and grow within a structured, closely supervised environment. Preferred Experience:? Experience related to ethical hacking or vulnerability assessments. One (or more) relevant certifications, or ability to pass exam: GPEN, GWAPT, OSCP CTF experience (HackTheBox, VulnHub, OverTheWire, etc) Educational Requirements Bachelors degree in computer science, Information Security, or related field or equivalent work experience. What makes this a great opportunity? Join an innovative, high growth company with a solid industry track record Bring your expertise and ideas to directly impact and help build the next generation of MedInsight products and solutions Enjoy significant visibility in your work and be recognized for your wins Work for a company that values your wellbeing and professional growth, offering a flexible work environment, generous benefits package, and investment in the development of your career Milliman Benefits:? We offer competitive benefits which include the following based on plan eligibility: Supportive work culture focused on continuous learning, growth, and team collaboration Exposure to international teams and projects for broader professional experience Flexible working hours with hybrid/remote options to support work-life balance Annual health check-ups and employee wellness programs for a healthier lifestyle Employee Assistance Program (EAP) offering confidential mental health support Paid time off including vacation, sick leave, and recognized public holidays Show more Show less

Posted 3 days ago

Apply

4.0 - 6.0 years

0 Lacs

India

On-site

HOURS: 8am CST- 4pm CST (6:30pm IST-2:30am IST) Rate- $13-$18/hr USD Must Have: 4-6 years of hands on SOC Control Testing experience Extensive knowledge of SOC1, and SOC 2 compliance requirements and ITGC framework Must have experience designing, executing, and documenting test procedures Expert-level Excel skills (pivot tables, complex formulas) Experience with one of the Big Four (Deloitte, EY, PwC, KPMG) Understanding of ERP, Cloud, and DevOps, and IAM tools for controls testing (SAP, Azure, GitHub, Sailpoint)- MUST have SAP Ability to manage multiple priorities and projects simultaneously Must be familair with COSO/COBIT, NIST, and ISO frameworks with hands on experience with COSO/COBIT Plusses: CISA Certification (Certified Information Systems Auditor) CISSP Certification (Certified Information Systems Security Professional) Extensive scripting experience for automation and data extraction Job Summary: We are seeking a SOC Controls Tester specializing in IT General Controls (ITGC) to assist with SOC monitoring across over 87 systems. The successful candidate will have extensive experience with SOC compliance requirements and the overall ITGC framework. Responsibilities include designing, executing, and documenting control testing procedures, identifying potential control deficiencies, and recommending effective remediation strategies. The ideal candidate must have advanced Excel skills, including complex formulas, pivot tables, and handling large datasets. Proficiency in scripting languages is required to pull and analyze different data sets. Competence in troubleshooting issues within automated scripts and data analysis processes is essential. Excellent verbal and written communication skills are necessary to document findings and collaborate effectively with IT and business stakeholders. Meticulous attention to detail is crucial to ensure thoroughness and precision in testing and documentation.

Posted 3 days ago

Apply
cta

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

Featured Companies