Information Security Specialist, AVP

Information Security Specialist, AVP    

Position Overview

Job Title:

Information Security Specialist
Corporate

Title:

AVP

Location:

Pune, India

Role Description
The Security Compliance & Risk Team is responsible for the overall security posture and risk governance across all End-User products and services. As Information Security Specialist, you will be responsible for collaborating with the EUC Product and Operations Manager, your respective team and affiliate stakeholders to respond to various demands in the end user asset management space. This is a dynamic role which will also entail leading collaboration and driving forward technology needs and responding to various escalations, inquiries and responding to audits and regulatory questionnaires.
You'll be a well-seasoned technologist with 10+ years of experience and will join a global team of other expert individuals that collectively make a large impact to our bank through creativity, innovation, and passion.
In summary, the Information Security Specialist is responsible for delivering specific aspects of the risk, security, and control strategy for End User Computing Security, Risk and Compliance Team.

What we'll offer you
As part of our flexible scheme, here are just some of the benefits that you'll enjoy
Best in class leave policy
Gender neutral parental leaves
100% reimbursement under childcare assistance benefit (gender neutral)
Sponsorship for Industry relevant certifications and education
Employee Assistance Program for you and your family members
Comprehensive Hospitalization Insurance for you and your dependents
Accident and Term life Insurance
Complementary Health screening for 35 yrs. and above

Your key responsibilities
Must have good exposure to relationship and project management skills.
Monitoring and tracking risk and control activities, risk-based control reporting of key issues, KPIs, and KRIs as it pertains to your book of work.
Respond to global regulatory and infosec certification queries like ISO 27001, COBIT, RBI, MAS, EBA, BaFin, FED, others.
The ability to multitask, prioritize work and adapt during sometimes pressured situations.
Ability to effectively work with business users, developers and other technology colleagues outside of your direct team, across a broad range of business functions and at all levels of the organization

Experience of working on coordinating activity related to Technology questionnaires received from regulators.
Ownership of the  End User Asset Governance activities, like  monitoring end user device management processes across all regions.
Manage and own the Customer services relationship on regional level.
Acts as a SME to central teams, procurement functions and senior management.
Ability to monitor, manage, develop, and drive performance within the team.
Focus on expediting audit points and findings to successful outcomes and closure.
Ensure Customer Services adheres to bank wide regulatory and compliance requirements and risk frameworks.
Data Quality management - identifying, reporting, analyzing, and resolving issues impacting the timeliness, accuracy or completeness of risk measures using the Department's and Bank's framework for Data/Issue management by collaborating across teams and stakeholders.
Be the subject matter expert for End User Device management risks and the Operational & Control processes
Owns and maintain policy procedures or KODs on company policy portal in accordance with regulator and information security guidelines.
Measure and Track compliance of global local customer services in accordance with Procedures on policy portal.
Maintain central control of Network access of end user devices on bank's network.
Data Analysis, Global Regulatory and Management Reporting.
Proactive approach towards Process Automation.

Your skills and experience
Service Now Hardware Asset Management Design, Implementation and Operation.
Excel reporting expert, must be able to write intermediate level SQL queries, Powershell
Knowledge of any of the control's framework like COBIT, ISO 27001:2022 or NIST
Sound knowledge on Windows OS, Service Now Operations.
Power platform and automation work experience
MS Intune, Service Graph API
Excellent verbal and written communication skills
Strong analytical and problem-solving skills.
Strong interpersonal skills: ability to partner with internal partners and leverage internal resources
Experience in preparing key operating documents/procedures/policies.
Able to cope well under pressure and meet deadlines
Eye for detail and willingness to question current state practices
Independent, self-motivated and a team player.
Strong capacity to assimilate other stakeholders' perspectives and fast learning abilities
Proficient in MS Office applications
Ability to apply regulatory guidance to review processes in absence of written policy
Good to have knowledge on application packaging and application virtualization
Strong time management, organizational, planning and follow-up skills ability to multi-task effectively

Experience
10+ years…