Security Control Assessor

IDFC FIRST Bank; Navi Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

IDFC FIRST Bank invites a Security Control Assessor to join its Risk Function within the Information Security Group, based in Mumbai or Chennai. This role supports the Security Architecture team by assisting in the definition, documentation, and review of technology security requirements.

The ideal candidate will help establish repeatable processes for security reviews and ensure comprehensive documentation of security design and development activities.

Qualifications

• Bachelor's degree in a relevant field; Master's preferred.
• Minimum 7 years of information security, risk assessment, or security architecture experience.
• Familiarity with cloud security governance and risk management is a plus.

Responsibilities

• Act as the first-level reviewer for security assessments and document repeatable tasks.
• Ensure security designs and cybersecurity development activities are well documented.
• Update functional descriptions of security implementations as needed.
• Assess the effectiveness of implemented security controls.
• Identify security risks and contribute mitigations in Risk Governance processes.

Skills

Cybersecurity fundamentals

Security controls

Documentation

Communication

Cross-functional collaboration

Education

BE or B.Tech in CS/IT/Cybersecurity

ME or M.Tech preferred

Job description

About the Role

We are seeking a Security Control Assessor to join our Risk Function within the Information Security Group (ISG), based in Mumbai or Chennai. This role supports the Security Architecture team by assisting in the definition, documentation, and review of technology security requirements. The ideal candidate will help establish repeatable processes for security reviews and ensure comprehensive documentation of security design and development activities.

Key Responsibilities

Primary Responsibilities

• Act as the first-level reviewer for security assessments, identifying repeatable tasks and documenting them for further evaluation by the team.


• Ensure that security design and cybersecurity development activities are thoroughly documented, including functional descriptions of security implementations, and updated as needed.

Secondary Responsibilities

• Assess the effectiveness of implemented security controls.


• Participate in the Risk Governance process by identifying security risks, proposing mitigations, and contributing insights on other technical risks.

What We Are Looking For

Education

• A BE or B. Tech degree in Computer Science, Information Technology, Cybersecurity, or a related field.


• A ME or M.Tech degree in Post graduation is preferred.

Experience

• Minimum 7 years of experience in information security, risk assessment, or security architecture is preferred.


• Familiarity with cloud security governance and risk management processes is a plus.

Skills and Attributes

• Strong understanding of cybersecurity principles and security control frameworks.


• Ability to document technical processes and security implementations clearly and effectively.


• Analytical mindset with attention to detail.


• Good communication and collaboration skills to work effectively with cross-functional teams.