Cyber Security Senior Analyst

SGS Société Générale de Surveillance SA; Bengaluru; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

SGS Société Générale de Surveillance SA in Bengaluru is seeking a Lead Analyst to manage RCSA, risk management, and IT risk management (ITRM). You will lead governance meetings, oversee issue management, and drive remediation with the support of leadership.

The role emphasizes proactive risk assessment, data-driven dashboards, and collaboration with control owners across the organization. A background in governance, risk and regulatory compliance is essential.

Qualifications

• Experience with RCSA and risk management processes.
• Ability to publish dashboards and manage stakeholder meetings.
• Familiarity with IT risk management and action remediation processes.

Responsibilities

• Set up regular stakeholder meetings and drive risk discussions.
• Publish dashboards on schedule and ensure accuracy.
• Identify risks and drive action plans with owners across the org.
• Support deployment of the issue management process across entities.
• Coordinate with the second line of defense on risk controls.

Skills

RCSA

Risk management

ITRM

Governance

Dashboards

Tools

MyKRI

NIST Barometer Controls

Job description

ResponsibilitiesLead Analyst - (RCSA, Risk Management, ITRM, Follow Issue and Neef For Action remediation) Job Type Permanent contract Organization ISR / RSKPrimary Location India-BangalorePosting Date October 30, 2025

RESPONSIBILITIES IN THE ROLE

• Managing complexities/issues/risks within Business: Resolve issues with support from Manager
• Role : IC Role
• Governance - Stakeholder Management – 1. Set up meetings for regular connects with stakeholders. (CEO-3) 2. Manage meetings with support and contribute actively to discussion and identify points of action for all participants 3. Listen to internal partners and colleagues in order to understand and help them resolve with support from manager

Profile requiredSupport Activities:

• Provide support to Stake Holders and ensure that these alerts are resolved in a timely and accurate manner
• Publish Dashboards accurately as per the timelines

Issue / Need For Action :

• Help team to identify issue on perimeter
• Contribute to the deployment of the Issue management process across the entities under supervision
• Follow and monitor Issues / Need For Action remediations ; relaunch assigned actor to avoid overdue
• Publish Dashboards accurately as per the timelines
• Contribute to the challenges from the second line of defense

ITRM (IT Risk Management) :

• Challenge commentary / indicator values on tool Group (MyKRI)
• Build presentation campaign ITRM, sourcing on tool Group (MyKRI), quarterly to help BRM (Business Risk Manager)

Risk Assessment:

• Perform assessments independently / with support in timely manner and accurate manner and capture material risks that affect the process.
• TRA / NPC / RPA/ Vendor Assessment: Risk Assessments are performed in a timely, accurate and comprehensive manner
• Actions plans are discussed and agreed with help of Manager
• All Action items are tracked to effective closure

RCSA:

• Ensure RCSA exercise is performed in respect of the global schedule, based on a planning covering all the activities and risks as peer the blueprint
• Ensure that all risks are captured
• Challenge BL appropriately basis prior incidents, audit recos, anomalies etc.
• Create RCSA synthesis to be presented to BL head and validated

Responsibility

• 1. Identify and assessing the risks to which their scopes of activities are exposed
• 2. The implementation of action plans responding to anomalies detected.
• 3. The implementation of action plan monitoring to meet deadlines and report on progress made.
• 4. Ensure all captured risk are validated by the management.
• 5. Ensure all the high and very high risks are linked to action plans (NFA) or risk acceptances
• 6. Consult Incident management backlog to strengthen Activity/Risk node assessment
• 7. Consult audit to strengthen the Activity/Risk node assessment
• 8. Consult NIST Barometer Controls to strengthen the Activity/Risk node assessment
• 9. Consult Bris de RAS to strengthen the Activity/Risk node assessment
• 10. Consult OES team to strengthen the Activity/Risk node assessment
• 11. Consult Conformity (ABC/COMPASS) team to strengthen the Activity/Risk node assessment
• 12. Contribute to the annual blueprint reviews of the scope under responsibility

Why join us

Business insight

Why Join Us

We are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status”.

Business InsightAt Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious. Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating, and taking action are part of our DNA. If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!

Still hesitating?You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices, and sharing their skills with charities. There are many ways to get involved.

We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.