Cyber Security Lead Analyst - (260009C9)
Missions
Within Societe Generale Global Solution Center (SGGSC), you will join Global Cybersec Capability Centre (G3C) team based out of Bengaluru, working in Cyber sec team as an infosec specialist to contribute to the information security and risk management practice.
As a Cybersecurity senior analyst, you will be part of the SG Group’s MIBS (Mobility International Retail Banking and Financial Services) divisions’ ISR team. Based in Bangalore, you will manage infosec operations and responsibilities across regions and collaborate closely with security and IT Support teams across the organization to coordinate cybersecurity operations, governance activities, manage compliance efforts, and support audit readiness. You will play a vital role in presenting evidence, identifying risks, and implementing security controls in line with organizational and regulatory expectations.
The candidate will be working in a high-pressure environment, it calls for assertiveness and flexibility to ensure deadlines are met based on agreements / defined milestones.
The main responsibilities in the role are:
- Skills in Tanium console management is must. The overall knowledge of Tanium is necessary to be able to conduct investigations, provide service and support.
- Review of WAF (CloudProtector / Azure WAF) configuration against recommended practice, report issues/gaps and follow-up on findings remediation.
- Excellent in Operational execution and SOP tracking capability for L1 support.
- Cloud protector -> Creating namespaces, creating user accounts, etc.
- Review local firewall configuration (Symantec Endpoint Protection) for Ayvens entities and ensure compliance to rules set and best practices.
- DLP -> Analysis of declassification reports as per the DLP incidents reported.
à Good to have: Scripting development skills (Python only or Linux Shell & VBS) information retrieval/command execution script, development of “Sensor” Tanium.
Behavioral Skills on the job:
• Strong organization, analytical, presentation and reporting as well as determination skills
• Capacity to challenge local stakeholder’s arguments and action plan.
• Excellent organizational and cross-functional coordination skills
• Team player with strong initiative and the ability to work independently
• Effective analytical and decision-making abilities
• Proactive communication and stakeholder management skills
• Strong adaptability, openness to feedback, and willingness to continuously learn
• Results-driven with strong planning and execution discipline
• Negotiation skills are an added advantage
Profile
Technical Skills:
- Skills in Tanium console management. Ability to conduct investigations, provide service and support.
- Network Security knowledge (network protocols and layers)
- Strong organization, analytical, presentation and reporting as well as determination skills
- Capacity to challenge local stakeholders arguments and action plan.
- Cloud Protector
- Scripting – Good to have
Business Insight
Environment
At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious.
Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating and taking action are part of our DNA.
If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!
Still hesitating?
You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices and sharing their skills with charities. There are many ways to get involved.
We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.
Responsibilities
Salary : As per industry standard.
Industry :IT-Software / Software Services
Functional Area : IT Software - Application Programming , Maintenance
Cyber Security Senior Analyst - (260006Q7)
Missions
Within Societe Generale Global Solution Center (SGGSC), you will join Global Cybersec Capability Centre (G3C) team based out of Bengaluru, working in Third Party Risk Management team to contribute in the information security and risk management practice.
The candidate will be involved in the infosec operations, risk management activities, Third party security and governance. This implies working relations with extended Business lines and IT teams on behalf of G3C team.
The candidate will be working in a high-pressure environment, it calls for assertiveness and flexibility to ensure deadlines are met based on agreements / defined milestones
We are seeking a skilled and experienced Information Security & Risk specialist to join our team. The ideal candidate will have 7-9 years of experience in risk and information security audit, with a focus on third party risk management.
In this role, you will be responsible for conducting risk assessments and audits of the company's information security systems, processes, and controls. You will work closely with the Information Security team and other stakeholders to identify and evaluate potential security risks, and provide recommendations for mitigating and managing these risks.
The main responsibilities as a lead & performer are:
Perform third party risk assessments
Design security controls
Perform infosec audits
Act as a SPOC for the team
Work in close coordination with global Function Manager and local line manage
Responsibilities
- Continuously evaluate existing security practices, define and measure security-related activities and demonstrating improvements to the sec programs within the organization
- Work closely with governance, regulatory and compliance to help formulate and implement a strategy for security that is tailored to the specific risks facing the organization
- Monitor and provide continuous assurance on infrastructure security by leveraging available third party tools while assuring efficacy of controls against policies and certifications in the most automated manner
- Responsible for building effective working relationships, making sound decisions, successfully making changes, initiating action and achieving results
Profile
- 7-9 years of overall work experience in IT app/ Infrastructure, risk, cybersecurity
- A strong understanding and experience of establishing security governance across an organization
- Conducting risk assessments and audits of the company's information security systems, processes, and controls
- Identifying and evaluating potential security risks, including risks related to third party vendors and partners
- Developing and implementing strategies and processes for managing and mitigating identified risks
- Working with the Information Security team and other stakeholders to implement and maintain security controls and standards
- Providing guidance and support to the Information Security team and other stakeholders on information security best practices and standards
- Developing and maintaining security policies, procedures, and standards
- Reporting on audit findings and recommendations to the Information Security team and other stakeholders
- Keeping up-to-date with the latest developments and trends in information security, risk management, and third party risk management
- Strong a self-starter who has the ability to operate independently and demonstrates complete ownership over assigned objectives in a "semi-structured" environment
- Excellent oral/written presentation skills with ability to communicate effectively with senior executive leadership
Responsibilities
Salary : As per industry standard.
Industry :IT-Software / Software Services
Functional Area : IT Software - Application Programming , Maintenance
