Cybersecurity Analyst (Contract-To-Hire)

Orcapod Consulting Services; Bengaluru; Hybrid; INR 900,000 - 1,300,000; Full time

Job summary

Orcapod Consulting Services Bangalore is seeking a Cybersecurity Analyst with 7-9 years of experience in IT applications, infrastructure, risk and cybersecurity to lead and perform security initiatives.

The role involves designing controls, conducting third-party risk assessments, and audits, acting as the SPOC for the team, and coordinating with governance and compliance teams to strengthen the security program.

Qualifications

• 7-9 years of overall work experience in IT apps/infrastructure, risk, cybersecurity.
• Strong governance experience across an organization with risk assessments and audits.
• Experience coordinating with governance, regulatory and compliance teams.

Responsibilities

• Perform third party risk assessments.
• Design security controls.
• Perform infosec audits.
• Act as a SPOC for the team.
• Coordinate with global Function Manager and local line managerResponsibilities.
• Evaluate security practices and measure security-related activities.
• Formulate and implement security strategy tailored to organizational risks.
• Monitor infrastructure security and ensure controls align with policies.
• Build effective working relationships and drive changes to achieve results.
• Communicate with senior executives.

Skills

Risk assessments

Security controls design

InfoSec audits

Third party risk management

Governance & compliance

Stakeholder communication

Security policies & procedures

Security monitoring

Independent / self-starter

Executive communication

Job description

Location Bangalore

JD – Cybersecurity Analyst

The main responsibilities as a lead & performer are:

• Perform third party risk assessments
• Design security controls
• Perform infosec audits
• Act as a SPOC for the team
• Work in close coordination with global Function Manager and local line manageResponsibilities
• Continuously evaluate existing security practices, define and measure security-related activities and demonstrating improvements to the sec programs within the organization
• Work closely with governance, regulatory and compliance to help formulate and implement a strategy for security that is tailored to the specific risks facing the organization
• Monitor and provide continuous assurance on infrastructure security by leveraging available third party tools while assuring efficacy of controls against policies and certifications in the most automated manner
• Responsible for building effective working relationships, making sound decisions, successfully making changes, initiating action and achieving results Profile
• 7-9 years of overall work experience in IT app/ Infrastructure, risk, cybersecurity
• A strong understanding and experience of establishing security governance across an organization - Conducting risk assessments and audits of the company's information security systems, processes, and controls
• Identifying and evaluating potential security risks, including risks related to third party vendors and partners
• Developing and implementing strategies and processes for managing and mitigating identified risks
• Working with the Information Security team and other stakeholders to implement and maintain security controls and standards
• Providing guidance and support to the Information Security team and other stakeholders on information security best practices and standards
• Developing and maintaining security policies, procedures, and standards
• Reporting on audit findings and recommendations to the Information Security team and other stakeholders
• Keeping up-to-date with the latest developments and trends in information security, risk management, and third party risk management
• Strong a self-starter who has the ability to operate independently and demonstrates complete ownership over assigned objectives in a "semi-structured" environment
• Excellent oral/written presentation skills with ability to communicate effectively with senior executive leadership