Cyber Security Specialist
ITC Infotech
Job Description
We are hiring for the below mentioned requirement. Role - Cyber Risk Analyst Skills - Cyber Security Analyst, knowledgeable of cyber security aspects related to networking, application development, ops, incident response, 3rd party vendor management and OT Experience - 6 years to 12 years (relevant exp. a Cyber Security Analyst) Location - Bangalore (5 days' work from office) Notice period - Immediate to15 days joiners only. JD :- Day-to-day cyber risk management, ensuring risks are recorded in the risk management tool (IRM) and integrated into enterprise risk frameworks (ERM risk reporting, GRMC, Control Navigator).
Conduct risk assessments (SATs) for all new and existing technology, supporting the business to implement and run appropriate controls. Conduct business process cyber risk assessments, monitor emerging threats, and oversee mitigation activities. Provide expert advice on cybersecurity best practices and risk management strategies, guiding the integration of security controls across technical and non-technical departments.
Ensure compliance with internal policies, industry standards, and regulatory requirements. Provide detailed risk reporting (e.g. KRIs, risk status, remediation status), maintain governance processes and prepare data for risk forums for visibility and accountability.
Support internal and external audit readiness. Promote cybersecurity awareness through training programms and staff engagement. Participate in incident response and post-incident evaluations.
Collaborate with stakeholders across Business, IDT, Legal, Compliance, and Audit functions. Collaborate with central Cyber functions (GRC, Cyber Defence Centre and, Architecture & Engineering, Cyber OT) to ensure strategic cyber processes and tools are successfully implemented across the business. 8 years of professional experience in cyber security with a record of increasing scope and responsibility. Experience managing and communicating with global teams.
Ability to translate technical language into readily understandable language for business users. Experience assessing cyber risks of projects, vendors and technologies. Experience with and understanding of cyber security management, technologies, architecture and audits.