Cyber Security Senior Analyst

Societe Generale Global Solution Centre; Bengaluru; On-site; INR 1,200,000 - 1,600,000; Full time

Job summary

Societe Generale Global Solution Centre in Bengaluru seeks a Lead Analyst to drive RCSA, risk management, ITRM, follow-up on issues and NFAs. The role requires coordinating with stakeholders, building dashboards, and guiding remediation across entities.

The candidate will perform independent risk assessments, support action plan development, and ensure timely closure of all risk items under supervision. This on-site position is based in India-Bangalore and aligns with SG's global risk framework.

Responsibilities

• Managing complexities/issues/risks within Business: Resolve issues with support from Manager
• Governance - Stakeholder Management – Set up meetings for regular connects with stakeholders. (CEO-3)
• Manage meetings with support and contribute actively to discussion and identify points of action for all participants
• Listen to internal partners and colleagues in order to understand and help them resolve with support from manager
• Provide support to Stake Holders and ensure that these alerts are resolved in a timely and accurate manner
• Publish Dashboards accurately as per the timelines
• Issue / Need For Action : Help team to identify issue on perimeter
• Contribute to the deployment of the Issue management process across the entities under supervision
• Follow and monitor Issues / Need For Action remediations ; relaunch assigned actor to avoid overdue
• Publish Dashboards accurately as per the timelines
• Contribute to the challenges from the second line of defense
• ITRM (IT Risk Management) : Challenge commentary / indicator values on tool Group (MyKRI)
• Build presentation campaign ITRM, sourcing on tool Group (MyKRI), quarterly to help BRM (Business Risk Manager)
• Risk Assessment: Perform assessments independently / with support in timely manner and accurate manner and capture material risks that affect the process.
• TRA / NPC / RPA/ Vendor Assessment: Risk Assessments are performed in a timely, accurate and comprehensive manner
• Actions plans are discussed and agreed with help of Manager
• All Action items are tracked to effective closure
• RCSA: Ensure RCSA exercise is performed in respect of the global schedule, based on a planning covering all the activities and risks as peer the blueprint
• Ensure that all risks are captured
• Challenge BL appropriately basis prior incidents, audit recos, anomalies etc.
• Create RCSA synthesis to be presented to BL head and validated
• Responsibility: Identify and assessing the risks to which their scopes of activities are exposed
• The implementation of action plans responding to anomalies detected.
• The implementation of action plan monitoring to meet deadlines and report on progress made.
• Ensure all captured risk are validated by the management.
• Ensure all the high and very high risks are linked to action plans (NFA) or risk acceptances
• Consult Incident management backlog to strengthen Activity/Risk node assessment
• Consult audit to strengthen the Activity/Risk node assessment
• Consult NIST Barometer Controls to strengthen the Activity/Risk node assessment
• Consult Bris de RAS to strengthen the Activity/Risk node assessment
• Consult OES team to strengthen the Activity/Risk node assessment
• Consult Conformity (ABC/COMPASS) team to strengthen the Activity/Risk node assessment
• Contribute to the annual blueprint reviews of the scope under responsibility

Job description

Lead Analyst - (RCSA, Risk Management, ITRM, Follow Issue and Neef For Action remediation)

Reference 26000ANW

Lead Analyst - (RCSA, Risk Management, ITRM, Follow Issue and Neef For Action remediation)

Job Type Permanent contract

Organization ISR / RSK

Primary Location India-Bangalore

Posting Date October 30, 2025

Responsibilities

RESPONSIBILITIES IN THE ROLE

• Managing complexities/issues/risks within Business: Resolve issues with support from Manager
• Role : IC Role
• Governance - Stakeholder Management –
• Set up meetings for regular connects with stakeholders. (CEO-3)
• Manage meetings with support and contribute actively to discussion and identify points of action for all participants
• Listen to internal partners and colleagues in order to understand and help them resolve with support from manager

Profile Required

Support Activities:

• Provide support to Stake Holders and ensure that these alerts are resolved in a timely and accurate manner
• Publish Dashboards accurately as per the timelines
• Issue / Need For Action :
• Help team to identify issue on perimeter
• Contribute to the deployment of the Issue management process across the entities under supervision
• Follow and monitor Issues / Need For Action remediations ; relaunch assigned actor to avoid overdue
• Publish Dashboards accurately as per the timelines
• Contribute to the challenges from the second line of defense
• ITRM (IT Risk Management) :
• Challenge commentary / indicator values on tool Group (MyKRI)
• Build presentation campaign ITRM, sourcing on tool Group (MyKRI), quarterly to help BRM (Business Risk Manager)
• Risk Assessment:
• Perform assessments independently / with support in timely manner and accurate manner and capture material risks that affect the process.
• TRA / NPC / RPA/ Vendor Assessment: Risk Assessments are performed in a timely, accurate and comprehensive manner
• Actions plans are discussed and agreed with help of Manager
• All Action items are tracked to effective closure
• RCSA:
• Ensure RCSA exercise is performed in respect of the global schedule, based on a planning covering all the activities and risks as peer the blueprint
• Ensure that all risks are captured
• Challenge BL appropriately basis prior incidents, audit recos, anomalies etc.
• Create RCSA synthesis to be presented to BL head and validated
• Responsibility
• Identify and assessing the risks to which their scopes of activities are exposed
• The implementation of action plans responding to anomalies detected.
• The implementation of action plan monitoring to meet deadlines and report on progress made.
• Ensure all captured risk are validated by the management.
• Ensure all the high and very high risks are linked to action plans (NFA) or risk acceptances
• Consult Incident management backlog to strengthen Activity/Risk node assessment
• Consult audit to strengthen the Activity/Risk node assessment
• Consult NIST Barometer Controls to strengthen the Activity/Risk node assessment
• Consult Bris de RAS to strengthen the Activity/Risk node assessment
• Consult OES team to strengthen the Activity/Risk node assessment
• Consult Conformity (ABC/COMPASS) team to strengthen the Activity/Risk node assessment
• Contribute to the annual blueprint reviews of the scope under responsibility

Why Join Us

We are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status”.

Business Insight

At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious. Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating, and taking action are part of our DNA. If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!

Still hesitating?

You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices, and sharing their skills with charities. There are many ways to get involved.

We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.