Information Security Lead Job at GlobalStep (Pune)

Information Security Risk Lead

The Information Security Risk Lead is responsible for driving efforts to support...

Location

Thailand , Bangkok

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Master’s/Bachelor’s/University degree or equivalent experience in Computer Science, Cyber Security, Computer/Information Engineering, Information Technology or a related discipline is preferred
One or more industry-recognized cybersecurity-related certifications such as CISSP, CISA, CISM, CRISC, ISO 27001
6 - 10 years or above of relevant experience in Cyber Security Management / Cyber Security Operations / Technology Risk Management / Third-party Risk Management or IT Audit, preferably with experience gained from banking / finance services industry / consultancy / control compliance or legal disciplines
Experience in assessing cyber regulatory compliance from BOT, SEC etc.
Strong understanding of International Standards/Frameworks such as: NIST, ISO 27001series, COBIT, CIS, GDPR, DORA, etc.
Proficient in interpreting and applying policies, standards and procedures
Excellent project management and organizational skills (PMP, PRINCE2, etc. is a plus)
Strong consultation, reporting writing and communication skills with highly proficiency in both spoken and written English and Thai
Thai language fluency is a must.

Job Responsibility

Manage and validate deliverables of all Information Security (IS) programs, ensuring closure per agreed timelines and goals
Engagement with local regulators BOT, SEC, TB-CERT, Thai-CERT, MDES, NCSA, etc. on IS related matters
Manage regulatory exams and internal & external audits
Work closely with Global & Regional Information Security teams to improve processes and reduce risk, and support the IS regulatory related activities for Thailand
Manage internal/external resources to organize cyber-attack simulations exercise, coordinating and overseeing vulnerability, mitigation/remediation/correction action plans, and issues management process
Accountable for delivery of the associated remediation from regulatory assessments
Proficiency in preparing periodic updates / reports / presentation deck for both internal stakeholders and regulators
Provide timely and appropriate updates to regional and global stakeholders
escalate issues in a timely manner to senior management
Build and develop partnerships with business, IT, risk, compliance, IS, senior management staff and stakeholders

Fulltime

Information Security Lead Analyst

As part of Citi Infrastructure Defense team, the analyst position will participa...

Location

Singapore , Singapore

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

8+ years of experience with multiple security disciplines and strong understanding of layered defense concepts
Deep understanding of TCP/IP technologies and knowledge of network routing protocols
Experience defining enterprise security strategy and ecosystem across diverse products
Strong hands on experience with firewall and proxy technologies (Bluecoat, Squid, NGINX)
Large Scale Network and Security design experience is essential
Work with and understand regulatory and risk management requirements
Strong unix / linux experience
Scripting (Python/Perl/Bash)
University / College degree in any STEM area or equivalent industry/technology knowledge

Job Responsibility

Identify opportunities to automate and standardize information security controls
Resolve any vulnerabilities or issues detected in an application or infrastructure
Analyze source code to mitigate identified weaknesses and vulnerabilities within the system
Review and validate automated testing results and prioritize actions that resolve issues based on overall risk
Scan and analyze applications with automated tools, and perform manual testing if necessary
Reduce risk by analyzing the root cause of issues, their impact, and required corrective actions
Direct the development and delivery of secure solutions by coordinating with business and technical contacts
Assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup

What we offer

Opportunity to work on the internal security posture for a large financial and thus shaping the industry overall
Exposure to a broad range of investment technology businesses and products
Access to our word class testing lab with physical hands on using hundreds of devices in the IT security ecosystem

Fulltime

Senior Information Security & OT Lead

Senior Information Security & OT Lead position in Athens, responsible for cybers...

Location

Greece , Athens

Salary:

Not provided

Metlen Group

Expiration Date

Until further notice

Requirements

Bachelor's degree in Information science, Information systems or a related scientific field
+5 years of experience in Information Security or Cybersecurity roles
Strong technical background in cybersecurity and OT security
Proven experience in managing information security in OT environments
Solid understanding of ISO 27001, ISA/IEC 62443, and NIS2 directives
Strong knowledge of risk management methodologies and compliance frameworks
Excellent collaboration and communication skills for multi-site and cross-border coordination

Job Responsibility

Respond to audit requirements for all international sites including factories, energy plants, and solar fields
Participate in cyber incident response processes related to international and local industrial installations
Guide technical leaders and support information security compliance in Greek and international operations
Propose cybersecurity architectures and solutions to safeguard operational technology (OT) infrastructure
Participate in management committees to inform senior leadership on cyber risks and compliance issues
Work closely with international IT business partners on cybersecurity topics across the global footprint

What we offer

Competitive remuneration package
Ticket Restaurant Card
Group Health Insurance Plan
Preferential household electricity plan
Pension Plan

Fulltime

Information Security & OT Lead

At METLEN Energy & Metals, we are catalysts for a sustainable future, positioned...

Location

Greece , Athens

Salary:

Not provided

Metlen Group

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Information science, Information systems or a related scientific field
Master’s degree will be considered an asset
+5 years of experience in Information Security or Cybersecurity roles
Strong technical background in cybersecurity and OT security
Proven experience in managing information security in OT environments is a strong plus
Solid understanding of ISO 27001, ISA/IEC 62443, and NIS2 directives
Strong knowledge of risk management methodologies and compliance frameworks
Excellent collaboration and communication skills for multi-site and cross-border coordination

Job Responsibility

Respond to audit requirements for all international sites including factories, energy plants, and solar fields
Participate in cyber incident response processes related to international and local industrial installations
Guide technical leaders and support information security compliance in Greek and international operations
Propose cybersecurity architectures and solutions to safeguard operational technology (OT) infrastructure
Participate in management committees to inform senior leadership on cyber risks and compliance issues
Work closely with international IT business partners on cybersecurity topics across the global footprint

What we offer

Competitive remuneration package
Ticket Restaurant Card
Group Health Insurance Plan
Preferential household electricity plan
Pension Plan

Legal Third-Party Management and Information Security Risk Lead

As part of the Legal Outside Counsel, Third Party Management and Operations team...

Location

United Kingdom , Belfast

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Ability to assess residual risk in complex vendor environments and make sound defensible recommendations
Experience applying risk-based frameworks to prioritize issues and mitigation efforts
Strong interpersonal skills for engaging legal, compliance, technology, procurement and senior risk stakeholders
Proficiency in creating clear and concise reports dashboards and governance experience
Leading or supporting cross functional projects, ability to support risk transformation initiatives, and integrate evolving legal tech and regulatory guidance into assessment methodologies
Bachelor’s degree or equivalent

Job Responsibility

Manage and oversee a set of complex initiatives that span multiple lines of business in the Cyber Security (CS), Information Security (IS) and Third-Party Risk Management (TPRM) space for Global Legal Solutions
Assess the risks and effectiveness of Third Party IS processes and controls based on enterprise requirements ensuring the IS risk is within tolerance
Evaluate the design and execution of the Legal IS Program, identifies potential enhancements and drives implementation of governance, methodologies and tools required for the effective oversight of Third-Party Management IS risk to continually strengthen the Program
Assist the day-to-day activities within the TPM Risk and Info Sec group
Monitor, track and control outcomes to resolve issues, conflicts, dependencies and critical path deliverables related to issues and gaps found in the TPISA process
Drive implementation of enterprise Third Party Management controls required to be assessed as part of the Managers Control Assessment, reviews results, and determines if remediation actions are appropriate
Document control design, testing methodology, and evidence for effectiveness reviews in compliance with Citi's Risk and Control Standards
Contribute to quarterly control certifications, issue management processes and audit engagements

What we offer

Generous holiday allowance starting at 27 days plus bank holidays
increasing with tenure
A discretional annual performance related bonus
Employee Assistance Program
Pension Plan
Paid Parental Leave
Special discounts for employees, family, and friends
Access to an array of learning and development resources
Private medical insurance packages to suit your personal circumstances

Fulltime

Information Security Professional Lead Analyst

The Info Sec Prof Lead Analyst is an intermediate level position responsible for...

Location

Philippines , City of Taguig

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

At least 7+ years of strong data analysis and report development experience
7+ years of experience in information security or related technology experience required
At least 7+ years’ experience with Business Intelligence Reporting tools like Cognos, Tableau
At least 7+ years’ experience with Databases like Oracle, SQL Server, Microsoft Access
Strong Business Intelligence Developer Skills
Strong understanding of application development life cycle, CI/CD and DevOps concepts
Excellent Excel data analysis and Access database skills
Excellent SQL Skills
Experience with issue resolution - ability to research, identify and communicate solutions
Consistently demonstrates clear and concise written and verbal communication

Job Responsibility

Design and implement a solution for performance measurements on effectiveness of controls and overall vulnerability assessment program
Analyze trends on assets security health posture and report using visualization tools for program review with management and stakeholders
Analyze and report aggregated data from multiple data sources
Develop data visualization mock-ups for monitoring program data trends and communicate using analytical tools
Develop reports for tracking program effectiveness and update power point deck for weekly, monthly and quarterly updates
Develop, optimize and provide continuous support for reports and ad-hoc queries from end user
Create dashboards with parameters and interactive drill down functionality
Analyze trends on assets security health posture and report using visualization tools for program review with management and stakeholders
Excellent Analytical Ability - Understand the systems and data flow at a high level to evaluate if appropriate controls are in place for the standards
Provide timely, accurate, and actionable reporting on application vulnerability activity, trends, service levels, and areas of concern to senior management

Fulltime