Tech Risk Consultant

Cloudxtreme; Hyderabad, Bengaluru, Delhi; On-site; INR 2,000,000 - 4,000,000; Full time

Job summary

Cloudxtreme in Hyderabad seeks an experienced information security leader with 8+ years in information security and 3+ years in technology risk management to design and operationalize risk programs across multiple cyber security domains.

The role requires strong communication skills, hands-on experience with security technologies, and knowledge of COBIT, COSO, ISO 27001, PCI, and NIST standards. BE/BTech plus MBA is preferred; CISSP/CRISC or equivalent is desirable.

Qualifications

• Bachelor's degree in information technology or related field is required.
• Experience with COBIT, COSO, ISO 27001, PCI, NIST frameworks.

Responsibilities

• Role & responsibilities are listed in the description block.

Skills

Excellent communication (verbal & writ

Industry standards & frameworks

Technology risk management programs

Stakeholder collaboration for cyber

Cyber risk domains (3+)

Cyber risk strategy

Cyber risk program management

Cyber security operations

Security architecture

Data protection

Application security/SDLC

Third party risk management

Cloud security

Cyber Threat Intelligence

Security Operations Center

Incident Response

Cyber Resilience

Education

Bachelor's degree in information technology or related field

BE/BTech + MBA (Preferred)

CISSP / CRISC (or equivalent)

Job description

Role & responsibilities

Required:

• Bachelors degree in information technology or related field
• 8+ years information security experience with 3+ years of experience in technology risk management
• Excellent verbal and written communication
• Understanding and knowledge of industry standards and industry frameworks (e.g., COBIT, COSO, ISO 27001, PCI, NIST)
• Experience of implementing and operationalizing technology risk management programs.
• Understanding of security requirements, contributions to security design and hands-on implementation of multiple security technologies and capabilities
• Hands on experience working with stakeholders in identifying, prioritizing and developing plans and roadmaps for cyber security programs
• Broad domain knowledge and strong understanding of three or more cyber security domains including (but not limited to):
• Cyber risk strategy
• Cyber risk program management and delivery
• Cyber security operations
• Security architecture
• Data protection
• Application security/SDLC
• Third party risk management
• Cloud security
• Cyber Threat Intelligence
• Security Operations Center
• Incident Response
• Cyber Resilience

Preferred:

• B.E. / B.Tech + MBA (Preferred)
• CISSP / CRISC (or equivalent)