Data Security Assessor

Tata Consultancy Services; Phoenix (AZ); On-site; USD 100,000 - 110,000; Full time

Job summary

Tata Consultancy Services is seeking a Data Security Assessor to conduct security assessments across Finance, Supply Chain, and HCM projects. You will review architectures, data flows, IAM and SoD controls, and encryption standards to identify risks and ensure regulatory compliance. Collaboration with cybersecurity, EA, and IT teams is essential.

The role requires 3–8+ years in information security, ERP security, or GRC, with hands‑on experience in SaaS security assessments.

Qualifications

• 3–8+ years of experience in information security, governance, risk, and compliance (GRC) or ERP security.
• Experience with security assessments of SaaS platforms, preferably Finance, Supply Chain, and Oracle HCM.
• Strong knowledge of IAM, data classification, encryption, authentication, and secure SDLC.

Responsibilities

• Conduct data security assessments for Finance, Supply Chain, and HCM applications and projects.
• Review architectures, integrations, APIs, and data flows to identify security risks.
• Evaluate sensitive data handling (PII, financial, payroll, supplier information).
• Assess IAM, RBAC, SoD, and privileged access across systems.
• Collaborate with cybersecurity, enterprise architecture, infrastructure, and applications teams.
• Review encryption standards for data at rest and in transit.
• Assess third‑party vendors and cloud solutions for security/compliance.
• Track remediation activities and verify implementation of recommendations.
• Prepare assessment reports, risk docs, and executive summaries.
• Support internal and external security audits.

Skills

Security reviews

Cloud platforms

Security automation (Java/Python)

ERP security/SoD

Vulnerability management

Risk assessment

Documentation and communication

Cross-functional collaboration

Job description

Job Description

Data Security Assessor

Must Have Technical/Functional Skills

• Experience conducting security architecture or application security reviews.
• Understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Hands-on experience with security automation using Java or Python.
• Knowledge of ERP security models and Segregation of Duties (SoD).
• Familiarity with vulnerability management and risk assessment methodologies.
• Strong analytical, documentation, and communication skills.
• Ability to work effectively with cross-functional business and technical teams.

Roles & Responsibilities

• Conduct data security assessments for Finance, Supply Chain, and HCM applications and projects.
• Review application architecture, integrations, APIs, and data flows to identify security risks.
• Assess sensitive data handling, including Personally Identifiable Information (PII), financial, payroll, and supplier information.
• Evaluate identity and access management (IAM), role-based access controls (RBAC), segregation of duties (SoD), and privileged access.
• Collaborate with cybersecurity, enterprise architecture, infrastructure, and application teams during project implementation.
• Review encryption standards for data at rest and in transit.
• Assess third-party vendors and cloud solutions for security and compliance requirements.
• Track remediation activities and verify implementation of security recommendations.
• Prepare assessment reports, risk documentation, and executive summaries.
• Support internal and external security audits.

Generic Managerial Skills, If any

• 3–8+ years of experience in information security, cybersecurity, governance, risk, compliance (GRC), or ERP security.
• Experience with security assessments of SaaS platforms, preferred- Finance, Supply Chain, and Oracle HCM.
• Strong understanding of:
• Identity and Access Management (IAM)
• Data classification
• Encryption technologies
• Authentication and authorization
• Secure SDLC
• Cloud security principles

Salary Range- $100,000-$110,000 a year