Senior Consultant- Cybersecurity

infosys-singaporeand-australia

Singapore, Central Singapore, Singapore · Singapore

Posted Dec 22, 2023

Full-time
Technology Transformation
Mid-Senior level

Job description

Key Responsibilities : Candidate should have Bachelor's degree in Computer Engineering with 10 -15+ years of relevant experience in Cyber Security. Supports defining, enhancing, evolving, and demonstrating company’s point of view and delivery approach of cybersecurity-focused services. Should have experience handling Issue and Exception handling process and Risk management. Builds and maintains client relationships, developing a strategic vision for clients and internal teams. Candidate should have played GRC role for ISO27k, PCI DSS. Perform review of RCSA (Risk Control Self-Assessment) to ensure controls are designed and operating effectively Maintain Technology Policies, Standards and Control Library. Technology policies and standards are in alignment with Customer’s adopted industry practices and standards (I.e. ISO, NIST, CSA,) Lead customer audit engagement (internal and external) and oversight on all IT audit matters Conduct reviews to ensure systems and processes comply with existing technology policies and standards Hands on experience in Operational Security Reviews Audits and Security Incident Management review. To support Compliance Scanning, Management and Reporting. To support Security audit and assessment activities (e.g., data collection, supporting evidence and report generation) and review the third-party support report. Effectively communication risks and system issues to all the stakeholders ahead in time to avoid any program risks/escalation. Directly responsible for procedures and controls to assure compliance with applicable regulatory and legal requirements as well as good business practices. Help ensure compliance with ISO27k, PCI and the NC Identity Theft law. Liaise with Internal & external Audit, Corporate Compliance and Risk. Ensure policies are reviewed and updated regularly. Promote and monitor the IS Security awareness program. Maintain expertise on security trends through training, research, and development in order to mitigate potential security exposures. Professional certification such as CISA, CISM, CRISC, or CISSP is desirable. Good understanding of financial domain and Security IT. Requirements Candidate should have Bachelor's degree in Computer Engineering with 10 -15+ years of relevant experience in Cyber Security. Supports defining, enhancing, evolving, and demonstrating company’s point of view and delivery approach of cybersecurity-focused services. Should have experience handling Issue and Exception handling process and Risk management. Builds and maintains client relationships, developing a strategic vision for clients and internal teams Perform review of RCSA (Risk Control Self-Assessment) to ensure controls are designed and operating effectively Maintain Technology Policies, Standards and Control Library. Technology policies and standards are in alignment with Customer’s adopted industry practices and standards (I.e. ISO, NIST, CSA,) Lead customer audit engagement (internal and external) and oversight on all IT audit matters Conduct reviews to ensure systems and processes comply with existing technology policies and standards Domain Skills CISA, CISM, CRISC, or CISSP Certification Mandatory ☐ Good to have ☒ Detailed Job Description Candidate should have Bachelor's degree in Computer Engineering with 10 -15+ years of relevant experience in Cyber Security. Supports defining, enhancing, evolving, and demonstrating company’s point of view and delivery approach of cybersecurity-focused services. Should have experience handling Issue and Exception handling process and Risk management. Builds and maintains client relationships, developing a strategic vision for clients and internal teams Perform review of RCSA (Risk Control Self-Assessment) to ensure controls are designed and operating effectively Maintain Technology Policies, Standards and Control Library. Technology policies and standards are in alignment with Customer’s adopted industry practices and standards (I.e. ISO, NIST, CSA,) Lead customer audit engagement (internal and external) and oversight on all IT audit matters Conduct reviews to ensure systems and processes comply with existing technology policies and standards Strong familiarity with industry frameworks such as ISO standards, GDPR, NIST, PCI DSS, CISO. Broad understanding of cyber security concepts and risks. Industry and Technology certifications – CISA, CISM, CRISC, or CISSP

Key Responsibilities :

Candidate should have Bachelor's degree in Computer Engineering with 10 -15+ years of relevant experience in Cyber Security.
Supports defining, enhancing, evolving, and demonstrating company’s point of view and delivery approach of cybersecurity-focused services.
Should have experience handling Issue and Exception handling process and Risk management.
Builds and maintains client relationships, developing a strategic vision for clients and internal teams.
Candidate should have played GRC role for ISO27k, PCI DSS.
Perform review of RCSA (Risk Control Self-Assessment) to ensure controls are designed and operating effectively
Maintain Technology Policies, Standards and Control Library. Technology policies and standards are in alignment with Customer’s adopted industry practices and standards (I.e. ISO, NIST, CSA,)
Lead customer audit engagement (internal and external) and oversight on all IT audit matters
Conduct reviews to ensure systems and processes comply with existing technology policies and standards
Hands on experience in Operational Security Reviews Audits and Security Incident Management review.
To support Compliance Scanning, Management and Reporting.
To support Security audit and assessment activities (e.g., data collection, supporting evidence and report generation) and review the third-party support report.
Effectively communication risks and system issues to all the stakeholders ahead in time to avoid any program risks/escalation.
Directly responsible for procedures and controls to assure compliance with applicable regulatory and legal requirements as well as good business practices.
Help ensure compliance with ISO27k, PCI and the NC Identity Theft law.
Liaise with Internal & external Audit, Corporate Compliance and Risk.
Ensure policies are reviewed and updated regularly.
Promote and monitor the IS Security awareness program.
Maintain expertise on security trends through training, research, and development in order to mitigate potential security exposures.
Professional certification such as CISA, CISM, CRISC, or CISSP is desirable.
Good understanding of financial domain and Security IT.

Requirements

Candidate should have Bachelor's degree in Computer Engineering with 10 -15+ years of relevant experience in Cyber Security.
Supports defining, enhancing, evolving, and demonstrating company’s point of view and delivery approach of cybersecurity-focused services.
Should have experience handling Issue and Exception handling process and Risk management.
Builds and maintains client relationships, developing a strategic vision for clients and internal teams
Perform review of RCSA (Risk Control Self-Assessment) to ensure controls are designed and operating effectively
Maintain Technology Policies, Standards and Control Library. Technology policies and standards are in alignment with Customer’s adopted industry practices and standards (I.e. ISO, NIST, CSA,)
Lead customer audit engagement (internal and external) and oversight on all IT audit matters
Conduct reviews to ensure systems and processes comply with existing technology policies and standards

Domain Skills

CISA, CISM, CRISC, or CISSP

Certification

Mandatory ☐

Good to have ☒

Detailed Job Description

Candidate should have Bachelor's degree in Computer Engineering with 10 -15+ years of relevant experience in Cyber Security.
Supports defining, enhancing, evolving, and demonstrating company’s point of view and delivery approach of cybersecurity-focused services.
Should have experience handling Issue and Exception handling process and Risk management.
Builds and maintains client relationships, developing a strategic vision for clients and internal teams
Perform review of RCSA (Risk Control Self-Assessment) to ensure controls are designed and operating effectively
Maintain Technology Policies, Standards and Control Library. Technology policies and standards are in alignment with Customer’s adopted industry practices and standards (I.e. ISO, NIST, CSA,)
Lead customer audit engagement (internal and external) and oversight on all IT audit matters
Conduct reviews to ensure systems and processes comply with existing technology policies and standards
Strong familiarity with industry frameworks such as ISO standards, GDPR, NIST, PCI DSS, CISO. Broad understanding of cyber security concepts and risks.

Industry and Technology certifications – CISA, CISM, CRISC, or CISSP

Infosys Consulting is the worldwide management and IT consultancy unit of the Infosys Group (NYSE: INFY), global advisor to leading companies for strategy, process engineering and technology-enabled transformation programs. We partner with clients to design and implement customized solutions to address their complex business challenges, and to help them in a post-modern ERP world. By combining innovative and human centric approaches with the latest technological advances, we enable organizations to reimagine their future and create sustainable and lasting business value. A pioneer in breaking down the barriers between strategy and execution, Infosys Consulting delivers superior business value to its clients by advising them on strategy and process optimisation as well as IT-enabled transformation. To find out how we go beyond the expected to deliver the exceptional, visit us at www.infosysconsultinginsights.com Infosys Consulting - a real consultancy for real consultants.

We partner with clients to design and implement customized solutions to address their complex business challenges, and to help them in a post-modern ERP world. By combining innovative and human centric approaches with the latest technological advances, we enable organizations to reimagine their future and create sustainable and lasting business value.

A pioneer in breaking down the barriers between strategy and execution, Infosys Consulting delivers superior business value to its clients by advising them on strategy and process optimisation as well as IT-enabled transformation. To find out how we go beyond the expected to deliver the exceptional, visit us at www.infosysconsultinginsights.com Infosys Consulting - a real consultancy for real consultants.