Cyber Security Consultant

GRM Technologies; Chennai District; On-site; INR 800,000 - 1,200,000; Full time

Job summary

GRM Technologies in Chennai seeks a Cyber Security professional with 2-8 years of experience in IT risk, cyber risk and compliance, IT audit, and VAPT. You will oversee information security controls, regulatory mapping, and risk documentation across multiple clients including BFSI and manufacturing.

Responsibilities include performing vulnerability assessments, web/mobile app security testing, secure code review, architecture reviews, and helping with DR/BCP planning.

Qualifications

• Knowledge of information security standards, principles and practices required.
• Perform risk assessment, controls and documentation with expected standards (information technology/ business process).
• Conduct Infrastructure Vulnerability Assessment and Penetration Testing.
• Conduct Web Application Security Assessment.
• Conduct Mobile Application Security Assessment.
• Conduct Source Code Review.
• Perform SOX compliance audits, SOC 1 and SOC 2 audits, as well as testing and reporting.

Responsibilities

• Information risk management and governance for client engagements.
• Information security and information assurance across domains.
• IT controls for financial and other systems.
• Identify and implement security architecture improvements.
• Disaster recovery and business continuity management.
• BCP/DR policy drafting and testing.
• Client communication and escalation management.
• Proposal participation and scope alignment.

Skills

Information security

Risk assessment

IT risk

VAPT

IT audit

SOC audits

ISO 27001 exposure

Job description

Roles and Responsibilities

Greetings from GRM Technologies!!!

Providing support in IT and Cyber Risk Advisory services offered by GRM Technologies to its clients in the following domains-

Information regulatory compliance (ISO 27001, PCIDSS, RBI, SEBI, SOC1, SOC2, PCI DSS, HITRUST, GDPR)

1. Information risk management
2. Information security and information assurance
3. Information technology controls for financial and other systems
4. Identifying processes and technologies to maintain and enhance the security architecture
5. Disaster recovery and business continuity management Information privacy
6. Have a fair understanding of Business Continuity Planning and DR Drills
7. Should have conducted Information Life Cycle management reviews in the past
8. Conducting Infrastructure Vulnerability Assessment and Penetration Testing
9. Conducting Web and Mobile Application Security Assessment
10. Conducting Secure Code Review
11. Conducting Architecture Review

Should have minimum 2-8 yrs. of experience into Cyber Security, including IT Risk, Cyber Risk & Compliance, IT Audit, Vendor Audit, VAPT, Application Security, Fraud Risk & Security.

• Knowledge of information security standards, principles and practices required
• Perform risk assessment, controls and documentation with expected standards (information technology/ business process)
• Conduct Infrastructure Vulnerability Assessment and Penetration Testing
• Conduct Web Application Security Assessment
• Conduct Mobile Application Security Assessment
• Conduct Source Code Review
• Perform SOX compliance audits, SOC 1 and SOC 2 audits, as well as testing and reporting
• Perform control testing pertaining to operating systems, data base (Windows, Unix, Oracle, MSSQL, DB2)
• Should be able to test basic and automated ERP ITGC controls (SAP, Oracle, etc.)
• Ability to draft BCP/ DR policy and carry out testing of plan and procedures would be preferable
• Ability to adapt to new scope areas and technologies
• Bring in vertical expertise in at least two verticals like BFSI, manufacturing, or more
• Ability to manage client communication and escalation
• Ability to make all attempts to guide the peers and self to improve client satisfaction scores
• Participate in proposal preparation
• Understanding of risk
• Appreciation for technological innovation
• Strong organization skills
• Curiosity and eagerness to learn
• Initiative to seek out opportunities and add value
• Tolerance for ambiguity and shifting priorities; appreciation of change.
• Should have certification on CCNA / CCNP / ITIL
• Exposure into ISO 27001 is mandate