Cyber Security Lead Analyst - DWS OSM

Societe Generale Global Solution Centre; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Societe Generale Global Solution Centre in Bengaluru seeks an experienced security professional to lead network risk assessments and implement secure end-user infrastructure practices. You will analyze threats, coordinate risk mitigation, and ensure compliance with international standards.

You will act as a security expert, support audits, monitor vulnerabilities, and report KPIs to stakeholders, contributing to SG's secure digital workplace strategy in a global IT hub.

Qualifications

• 5+ years of experience in network risk assessment, operational security and risk management or related fields
• Strong understanding end-user tools, infrastructure compliance frameworks, and risk management principles
• Familiarity with security framework, tools, and technologies (e.g. ISO 27001/27005, NIST, CIS)

Responsibilities

• Strong knowledge of end-user tools (laptops, desktops, virtualization, remote access, printers, office 365) and related infrastructure services (telephony, messaging, directories, office automation, security).
• Experience in conducting risk assessments and security evaluations of desktop services and on-premises applications/infrastructure.
• Ability to assess and prioritize threats, vulnerabilities, risks, and attack vectors, and develop effective mitigation strategies.
• Skilled in integrating security into projects and infrastructure following secure-by-design principles
• Enforce Group policies, standards, procedures and security best practices within the department.
• Communicate risk and security recommendations clearly to stakeholders.
• Support security audits (internal and regulatory) and monitor timely closure of audit recommendations.
• Act as the security expert and point of contact for operational security and risk management activities.
• Monitoring and follow-up of vulnerabilities on managed perimeters.
• Define and report on relevant KPIs/KRIs and security alerts

Skills

Risk analysis

Threat identification

Analytical skills

Communication skills

Job description

Responsibilities

• Strong knowledge of end-user tools (laptops, desktops, virtualization, remote access, printers, office 365) and related infrastructure services (telephony, messaging, directories, office automation, security).
• Experience in conducting risk assessments and security evaluations of desktop services and on-premises applications/infrastructure.
• Ability to assess and prioritize threats, vulnerabilities, risks, and attack vectors, and develop effective mitigation strategies.
• Skilled in integrating security into projects and infrastructure following secure-by-design principles
• Enforce Group policies, standards, procedures and security best practices within the department.
• Communicate risk and security recommendations clearly to stakeholders.
• Support security audits (internal and regulatory) and monitor timely closure of audit recommendations.
• Act as the security expert and point of contact for operational security and risk management activities.
• Monitoring and follow-up of vulnerabilities on managed perimeters.
• Define and report on relevant KPIs/KRIs and security alerts

Required

Profile required

• 5+ years of experience in network risk assessment, operational security and risk management or related fields
• Strong understanding end-user tools, infrastructure compliance frameworks, and risk management principles
• Familiarity with security framework, tools, and technologies (e.g. ISO 27001/27005, NIST, CIS)

Key Skills

• Expertise in risk analysis on the Digital Workplace environment, identifying threats, vulnerabilities and risks
• Analytical and problem-solving skills and communication skills

Why join us

We are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Business insight

At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious. Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating, and taking action are part of our DNA. If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!

Still hesitating?

You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices, and sharing their skills with charities. There are many ways to get involved.

We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.