Assistant Manager - Cyber Security Risk & Compliance

Mphasis Ltd; Bengaluru; On-site; INR 1,600,000 - 2,600,000; Full time

Job summary

Mphasis Ltd is seeking a Cyber Security professional to manage operational security, information and cyber risk management. You will address vulnerabilities from OS and Pentest, perform security validations, and guide remediation with governance oversight.

The role requires hands-on ISMS implementation and risk management experience to strengthen the organization’s security posture. The candidate will coordinate with stakeholders, evaluate threats, and propose Mphasis capabilities for additional

Qualifications

• Certified ISO 27001 LA or CRISC with 7+ years of experience in operational security and risk management.

Responsibilities

• Manage vulnerabilities from OS, Pentest and controls and track remediation to closure.
• Conduct high, very high or critical risk assessments and perform peer reviews on cyber security risk assessments.
• Maintain up-to-date IT security risk assessments for products/services/infrastructure within scope.

Skills

ISO 27001 LA

CRISC

Job description

TPRM R&C - Asst. OM Job Description

Job Summary

We are seeking a Cyber Security AM to work on the operational, information and cyber security risk management field. The successful candidate will address Vulnerabilities from OS, Pentest, perform security validation and exceptions and recommend on the mitigation of risk. Follow the remediation with close Governance as part of identified risks and vulnerabilities.

Must Have Skills:

• Certified ISO 27001 LA, CRISC or equivalent 7+ years of experience in operational security and risk management or related fields
• Hands on experience in ISMS implementation, security and risk management

Responsibilities:

• Manage, follow up, report Vulnerabilities reported in OS, Pentest and/or Controls Identify, assess the risks & threats and follow-up on the identified risks remediation
• Conduct high, very high or critical risk assessments and perform peer review on cyber security risk assessments
• Maintain up-to-date IT security risk assessment of products/services/infrastructure within its functional scope and associated benchmarks.
• Monitor and coordinate for timely closure of audit recommendations (internal / regulators) and intervene in support of operational teams.
• Conduct risk assessments and security evaluations
• Manage the stakeholders, understand the business requirement and propose the Mphasis capabilities for additional revenue.
• Identify and prioritize vulnerabilities, threats, and potential attack vectors.
• Security Control Follow-ups, dashboard creation and reporting
• Communicate risk and security recommendations to stakeholders.
• Communicate regularly on the IT risks of its scope and on the mitigation plans

About Mphasis

Mphasis applies next-generation technology to help enterprises transform businesses globally. Customer centricity is foundational to Mphasis and is reflected in the Mphasis' Front2Back Transformation approach. Front2Back uses the exponential power of cloud and cognitive to provide hyper-personalized (C=X2C2TM=1) digital experience to clients and their end customers. Mphasis' Service Transformation approach helps 'shrink the core' through the application of digital technologies across legacy environments within an enterprise, enabling businesses to stay ahead in a changing world. Mphasis' core reference architectures and tools, speed and innovation with domain expertise and specialization are key to building strong relationships with marquee clients.