Security Consultant-Exposure Management

International Business Machines Corporation; Bengaluru; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

IBM in Bengaluru seeks a Security Consultant focused on Exposure Management to identify, assess, and mitigate risks affecting assets, operations, and reputation. You will craft strategies aligned with cyber-security and risk-management principles.

You will build and maintain risk models, simulate exposures, and recommend holistic policies to senior management while collaborating across functions to ensure regulatory compliance.

Qualifications

• Bachelor's degree required; Master's preferred.
• Strong knowledge of cyber-security and risk management.
• Experience with vulnerability assessment and risk modeling.
• Familiarity with industry standards and regulatory requirements.

Responsibilities

• Identify and assess risks through exposure assessments and trend analysis.
• Create and maintain risk models and scenarios for exposure simulations.
• Develop and implement exposure protection strategies using security tools.
• Collaborate with cross-functional teams to ensure compliant risk management.
• Analyze industry trends to identify emerging risks and advise senior management.

Skills

Cyber-Security Principles

Risk Assessment Tools

Risk Modeling

Compliance and Regulations

Threat Analysis

Education

Bachelor's Degree

Master's Degree

Tools

Tenable

Qualys

Nexpose Rapid7

Ivanti Neurons

Cisco Kenna

Job description

Your Role and Responsibilities:

As a Security Consultant specializing in Exposure Management, you will be responsible for identifying, assessing, and mitigating security risks and exposures that could impact the organization's assets, operations, financial stability, and reputation. You will develop and implement strategies to protect against various types of threats, requiring a deep understanding of cyber-security and risk management principles.

Your Primary Responsibilities Will Include:

• Identify and Assess Risks: Conduct exposure assessments to identify potential vulnerabilities and associated risks, analyzing data and industry trends to identify emerging risks and opportunities.
• Develop Risk Models: Create and maintain risk models and scenarios to simulate potential exposures, working collaboratively with peer cyber-security functions to provide holistic recommendations to senior management on exposure management strategies and policies.
• Implement Protection Strategies: Develop and implement strategies to protect against various types of threats, utilizing tools such as Tenable, Qualys, Nexpose Rapid 7, Ivanti Neurons, and Cisco Kenna.
• Collaborate with Cross-Functional Teams: Work closely with cross-functional teams to ensure comprehensive risk management and compliance with industry standards and regulations.
• Analyze Emerging Risks: Analyze data and industry trends to identify emerging risks and opportunities, providing recommendations to senior management on exposure management strategies and policies.

Required Education:

Bachelor's Degree

Preferred Education:

Master's Degree

Required Technical and Professional Expertise:

• Cyber-Security Principles: Exposure to cyber-security and risk management principles, including threat analysis and mitigation strategies.
• Risk Assessment Tools: Experience working with vulnerability assessment tools such as Tenable, Qualys, Nexpose Rapid 7, Ivanti Neurons, and Cisco Kenna.
• Risk Modeling: Exposure to developing and maintaining risk models and scenarios to simulate potential exposures.
• Compliance and Regulations: Experience working with industry standards and regulations related to comprehensive risk management.
• Threat Analysis: Exposure to analyzing data and industry trends to identify emerging risks and opportunities.

Preferred Technical and Professional Experience:

• Vulnerability Assessment Tools: Experience working with tools such as Tenable, Qualys, Nexpose Rapid 7, Ivanti Neurons, and Cisco Kenna is beneficial for identifying potential vulnerabilities and associated risks.
• Risk Modeling Techniques: Exposure to developing and maintaining risk models and scenarios to simulate potential exposures can aid in providing holistic recommendations to senior management.
• Compliance and Regulations: Familiarity with industry standards and regulations related to comprehensive risk management can support ensuring compliance and mitigating security risks.

Years of Experience:

7 - 9