Description

You will conduct information security evaluations across infrastructure, business applications, third-party software, and cloud environments. You will analyze high-risk findings, communicate risk treatment options to management, and ensure regulatory compliance.

Responsibilities

• Evaluate information security frameworks, policies, and internal controls for regulatory and reputational impact.
• Perform security assessments on network connectivity, data warehouses, and software development lifecycles.
• Identify security control gaps and program compliance issues through research and analysis.
• Develop and deliver information security education and awareness training.
• Mentor junior consultants and facilitate cross-training within the team.

Required Skills

• 8+ years of experience in IT or Information Security Risk management.
• Professional certification such as CISSP, CISA, CISM, CRISC, or CCSK.
• Strong technical knowledge of encryption, access control, vulnerability management, and network security.
• Hands-on experience with Agile, DevOps, and Cloud Security.
• Proficiency in applying Information Security Frameworks and standards.
• Bachelor’s degree in Computer Science, Information Systems, or a related field.
• Experience managing security for large-scale enterprise solutions across multiple geographic locations.

Preferred Skills

• Experience working with US banks and complex global teams.
• Expertise in technical report writing and communicating complex concepts to non-technical stakeholders.

Key Skills

Education

Any Graduate