Cyber Security Consultant - SEC/OPM/COO-OSM

Societe Generale Global Solution Centre; Bengaluru; On-site; INR 9,578,544 - 14,367,816; Full time

Job summary

Societe Generale Global Solution Centre is seeking a seasoned Cybersecurity Consultant to enhance security posture and manage risks across traditional and cloud infrastructures. The ideal candidate will possess over 10 years of experience in security assessments, risk management, and compliance frameworks.

The position involves detailed responsibilities like overseeing remediation efforts, conducting risk assessments, and engaging with various stakeholders. A commitment to best practices and a professional certification in risk management or cybersecurity are essential for this role.

Qualifications

• 10+ years of experience in operational security and risk management.
• Strong understanding of infrastructure and application security.
• Proven experience in security assessments and risk management.
• Familiarity with various security frameworks and tools.
• Excellent communication skills for technical and non-technical stakeholders.

Responsibilities

• Conduct comprehensive risk assessments and security evaluations.
• Enforce group security policies and compliance standards.
• Drive global security programs, including penetration testing.
• Lead resolution of security incidents and audits.
• Communicate with stakeholders regarding security risks.

Skills

Operational security expertise

Risk management

Security assessments

Cloud and infrastructure security

Analytical skills

Communication skills

Education

Relevant professional certifications (CRISC, CISSP, etc.)

Tools

NIST Cybersecurity Framework

ISO/IEC 27001

CIS Benchmarks

OWASP Top 10

CSPM

CWPP

CIEM

DAST/SAST solutions

Job description

Reference 260003ER

Job Summary

We are seeking a seasoned Cybersecurity Consultant to support operational security and risk management activities across both traditional and cloud infrastructures and applications. The ideal candidate will be responsible for executing security validations and managing exception processes, reviewing security incidents, conducting multi‑level risk assessments, and driving security initiatives. This role also involves overseeing remediation efforts with strong governance, addressing identified risks and vulnerabilities, and developing strategies to enhance overall security posture and ensure compliance.

Responsibilities

Risk Management & Security Assessment

• Conduct comprehensive risk assessments and security evaluations for on‑premise and cloud applications and infrastructure.
• Identify and assess threats, vulnerabilities, risks, and potential attack vectors, and prioritize mitigation efforts.
• Maintain up‑to‑date security risk assessments and benchmarks for all products, services, and infrastructure within scope.
• Assess and manage IT risk treatment for new projects and infrastructures, ensuring security‑by‑design principles are applied.
• Carry out regular security assessments of critical infrastructure, including penetration tests, high‑privilege account reviews, hardening checks, and secure‑by‑design validations.

Security Governance & Compliance

• Enforce group security policies, standards, procedures, and best practices.
• Evaluate security configurations, policies, and procedures, ensuring alignment with security frameworks.
• Assess compliance with industry standards and regulatory requirements (e.g., NIST, ECB, SOC 2, PCI‑DSS, OWASP).
• Develop and maintain risk management frameworks, playbooks, KPIs/KRIs, and security reporting dashboards.
• Disseminate updates to group policies, standards, and IT governance decisions across the reporting department.

Security Operations & Incident Management

• Act as the primary security expert and point of contact for operational security and risk management activities.
• Perform day‑to‑day security validations and manage security exceptions.
• Drive global security programs such as penetration testing and vulnerability management.
• Lead resolution of security incidents and contribute to post‑mortem investigations.
• Coordinate remediation of critical vulnerabilities with technical teams, SOC, and CERT.
• Alert management promptly upon detecting security anomalies within the functional scope.

Audit & Stakeholder Coordination

• Contribute to internal and regulatory security audits.
• Monitor and coordinate treatment of security risks and ensure timely closure of audit recommendations.
• Communicate regularly with stakeholders regarding security risks, mitigation plans, and audit statuses.
• Provide clear security recommendations and risk insights to leadership and technical teams.

Required

Profile required

• 10+ years of experience in operational security and risk management domains.
• Strong understanding of infrastructure and application security architectures, compliance frameworks, and core risk management principles.
• Proven experience conducting security assessments, risk assessments, and implementing effective security controls across complex environments.
• Excellent analytical, problem‑solving, and communication skills, with the ability to articulate risks and recommendations to technical and non‑technical stakeholders.
• Familiarity with security frameworks, tools, and technologies, including NIST Cybersecurity Framework, ISO/IEC 27001, CIS Benchmarks, OWASP Top 10, CSPM, CWPP, CIEM, and DAST/SAST solutions.
• Relevant professional certifications such as CRISC, CISSP, CCSP, CCSK, or equivalent credentials in risk management and cloud security.

Equal Opportunity

We are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status