Associate/Senior Associate - Information Security - GRC - Investment Bank

Role: Information Security Team

Designation: Associate Level 1 / Senior Associate

Exp Range: 2 to 5 yrs, Max 6 yrs is ok not beyond that

Work Location: Mumbai Only

Shifts: General Shifts

Notice: Imm Joiners preferred / Max 60 days

Direct Responsibilities:

- Primary responsibility to inventory the Singapore and Hong Kong end user developed software that are critical for bank employees to perform their role, perform a security risk assessment on the applications, and develop and track plans to converge the applications into approved and Controlled enterprise applications.

Contributing Responsibilities:

- Work closely with asset owners or representatives and technical staff to communicate, drive and track the application security assessment and document resultant findings in a standardized format.

Technical & Behavioral Competencies:

- Knowledgeable with common end user applications; Office and associated macros, Javascript, CSharp, VB Scripts, .Net, etc.

- Extended knowledge of IT Security Risk Management concepts and with good understanding of industry APAC regulations i.e. MAS TRM, HKMA.

- At least 2 years of direct IT Security Risk Assessment experience with a strong background in End User Application Risk Assessment, software development and SDLC,

- Must be able to handle stakeholders in a confident, positive and responsive manner

- Good communication, technical writing skills.

- Must be motivated, and able to work independently as well as part of a team.

- Must demonstrate ethical responsibility, maturity, and discretio

- Knowledgeable with IT infrastructure, network and/or application security. Proficient in Fintech, Cloud, Mobile, Virtualization, and Sandbox technologies, agile development methodology, and Infrastructure & network (Internet, Intranet, Extranet, DMZ), and Application (Web, Client-Server, payment systems) security reviews

- Extended knowledge of IT Security Risk Management concepts and with good understanding of industry APAC regulations i.e. MAS TRM, HKMA, FSA, etc

Mandatory Skills:

1. GRC Background

2. Good exposure on application security assessment / not on app sec analyst tech side or tools knowledge.

3. Performing IT Audits to analyze the gap / IT Risk management

4. Look after issues in implementation