2,424 Certified Information Systems Security Professional jobs in India

**About Us**
We are a global climate technologies company engineered for sustainability. We create sustainable and efficient residential, commercial and industrial spaces through HVACR technologies. We protect temperature-sensitive goods throughout the cold chain. And we bring comfort to people globally. Best-in-class engineering, design and manufacturing combined with category-leading brands in compression, controls, software and monitoring solutions result in next-generation climate technology that is built for the needs of the world ahead. 
Whether you are a professional looking for a career change, an undergraduate student exploring your first opportunity, or recent graduate with an advanced degree, we have opportunities that will allow you to innovate, be challenged and make an impact. Join our team and start your journey today!
**Job Purpose**
As a **Security Analyst** , you will be a key member of our Global Cybersecurity Team, helping to strengthen Copeland's cybersecurity posture. This role involves monitoring tools and dashboards, identifying and mitigating security vulnerabilities, and collaborating with teams to address risks effectively. You will also contribute to continuously improving our vulnerability management processes and play an active role in ensuring our IT systems remain secure.
**Key Responsibilities:**
+ Monitor security tools and dashboards to identify vulnerabilities, assess risks, and propose compensating controls to reduce risk.
+ Assess risks across IT infrastructure and cloud platforms.
+ Communicate findings to appropriate teams and track vulnerabilities through resolution.
+ Create detailed vulnerability reports for technical teams and summary reports for management.
+ Collaborate with IT and development teams to prioritize and remediate vulnerabilities.
+ Contribute to the development and improvement of vulnerability management processes and tools.
**Duties and Responsibilities:**
+ Support cybersecurity programs to align with organizational security objectives.
+ Conduct regular security scans, validate vulnerabilities through penetration testing, and retest fixes to ensure effectiveness across the enterprise and cloud environments.
+ Administer and monitor security tools.
+ Assist in establishing metrics and KPIs to measure vulnerability reduction.
+ Collaborate with business units and engineering teams to implement security policies, establish sustainable processes, and enhance compliance while reducing risk.
+ Provide support for cybersecurity projects, technical discussions, and collaborative meetings.
+ Identify and address gaps within the cybersecurity program, applying your expertise to strengthen the organization's security posture.
**Qualifications**
+ Bachelor's degree in Engineering, Computer Science, or related discipline
+ 5+ years of experience in vulnerability assessment, penetration testing, or cybersecurity.
+ Hands-on experience with vulnerability scanning tools and remediation processes.
+ Hands-on experience with cloud platforms (preferably Azure & AWS)
+ Knowledge of networking, operating systems (Windows, Linux), and application security.
+ Experience with vulnerability frameworks (NIST, CVSS, etc.)
+ Some experience with programming or scripting and familiarity with DevSecOps practices.
+ Strong communication skills, with the ability to deliver clear oral, written, and visual presentations.
+ Strong organizational skills, with the ability to plan, prioritize, and align tasks effectively.
+ Customer-focused mindset with a strong eagerness to learn and grow.
+ SANS GIAC, Network+, Security+, AZ-500 or other industry certifications preferred.
**Our Commitment to Our People**
Across the globe, we are united by a singular Purpose: Sustainability is no small ambition. That's why everything we do is geared toward a sustainable future-for our generation and all those to come. Through groundbreaking innovations, HVACR technology and cold chain solutions, we are reducing carbon emissions and improving energy efficiency in spaces of all sizes, from residential to commercial to industrial.
Our employees are our greatest strength. We believe that our culture of passion, openness, and collaboration empowers us to work toward the same goal - to make the world a better place. We invest in the end-to-end development of our people, beginning at onboarding and through senior leadership, so they can thrive personally and professionally.
Flexible and competitive benefits plans offer the right options to meet your individual/family needs. We provide employees with flexible time off plans, including paid parental leave (maternal and paternal), vacation and holiday leave. 
Together, we have the opportunity - and the power - to continue to revolutionize the technology behind air conditioning, heating and refrigeration, and cultivate a better future. Learn more about us and how you can join our team!
**Our Commitment to Inclusion & Belonging**
At Copeland, we cultivate a strong sense of inclusion and belonging where individuals of all backgrounds, and with diverse perspectives, are embraced and treated fairly to enable a stronger workforce. Our employee resource groups play an important role in culture and community building at Copeland.
**Equal Opportunity Employer**
Copeland is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, age, marital status, political affiliation, sexual orientation, gender identity, genetic information, disability or protected veteran status. We are committed to providing a workplace free of any discrimination or harassment.
With $5B of global revenue, Copeland is a leading provider of compression products, electronics, software, and solutions across many applications within Heating, Ventilation, Air Conditioning, and Refrigeration (HVACR), where macro and regulatory trends towards environmental sustainability, leads to changes in HVACR technology. Other products include other heating applications, food service and retail, transportation, and healthcare/life sciences. This new business also has a solution portfolio that manages, monitors, and controls refrigeration units in the commercial setting, as well as software solutions that measure and monitor temperature conditions of refrigerated goods in transit, where there is a greater emphasis on energy management/sustainability solutions globally.

Job Details:

Experience: 5 Years

Work Location: Chennai

Work Mode: Hybrid

Roles and Responsibilities:

• 5–7 years of hands-on experience in VAPT, preferably in both application and infrastructure testing.
• Perform manual verification and risk assessment of identified vulnerabilities.
• Track and validate remediation efforts in collaboration with IT and application teams.
• Execute black-box, grey-box, and white-box penetration tests on web applications, APIs, internal systems, external networks, and mobile apps.
• Exploit vulnerabilities in controlled environments to assess real-world risks.
• Simulate advanced threat actor behaviours and pivot through environments for lateral movement analysis.
• Review application architecture and code (static/dynamic analysis) for security issues.
• Work with DevOps and engineering teams to ensure secure SDLC practices are followed.
• Conduct threat modelling and provide recommendations during design and development phases.
• Prepare detailed reports with evidence of vulnerabilities, risk ratings, exploit techniques, and remediation guidance.
• Present findings to both technical and non-technical stakeholders.
• Maintain documentation of test plans, procedures, and assessment tools.
• Solid knowledge of OWASP Top 10, SANS 25, and CVSS scoring.
• Burp Suite, Metasploit, Nmap, Wireshark, Nikto, Hydra, and SQLmap SAST/DAST platforms like Fortify or Veracode
• Proficiency in scripting (Python, Bash, or PowerShell) to build or extend tools.
• Strong understanding of TCP/IP, firewalls, IDS/IPS, and network protocols.
• Familiarity with cloud security (AWS, Azure, or GCP).

**Job Description**
At Oracle Cloud Infrastructure (OCI) we build the future of the cloud for Enterprises. We act with the speed and attitude of a start-up along with the scale and customer focus of the leading enterprise software company in the world.
**About the team:**
The Enterprise Engineering SRE team is tasked with ensuring the security and compliance of internal systems by conducting regular audits, identifying potential gaps in existing standards and proactively improving the organization's overall security posture. The team plays a critical role in safeguarding the integrity, confidentiality and availability of all systems while driving risk management initiatives across departments including disaster recovery planning and execution. We are also responsible for liaising with various internal teams during audits, ensuring data sharing is concise, accurate and aligned for successful audit outcomes.
**Ideally, the candidate will possess several of the following skills:**
Supports the strengthening of Oracle's security posture, focusing on one or more of the following: regulatory compliance; risk management; incident management and response; security policy development and enforcement; Threat and Vulnerability Management; Incident Management and response and similar focus areas.
+ **Regulatory Compliance:** Brings advanced level skills to manage programs to establish, document and track compliance to industry and government standards and regulations, e.g. ISO-27001, PCI-DSS, HIPAA, FedRAMP, CMMC, GDPR, etc. Researches and interprets current and pending governmental laws and regulations, industry standards and customer and vendor contracts to communicate compliance requirements to the business. Participates in industry forums monitoring developments in regulatory compliance
+ **Risk Management:** Brings advanced level skills to assess the information security risk associated with existing and proposed business operational programs, systems, applications, practices and procedures in very complex, business-critical environments. Conduct and document very complex information security risk assessments and assist in the creation and implementation of security solutions and programs
+ **Cloud Security:** In-dept knowledge of cloud security principles and best practices, including securing cloud infrastructure, services, and applications in platforms, OCI experience is a plus
+ **Threat and Vulnerability Management:** Brings advanced level skills to research, evaluate, track, and manage information security threats and vulnerabilities in situations where in-depth analysis of ambiguous information is required
+ **Incident Management and response:** Brings advanced level skills to respond to security events and responding in line with Oracle incident response playbooks to mitigate vulnerabilities
+ Mentors and trains other team members
+ Compiles information and reports for management
**Qualifications:**
+ Bachelor's degree in computer science, Information Security, or a related field. Master's degree preferred
+ 8+ years of experience in information systems, business operations, or related fields,
+ 3+ years of experience in security operations, with a focus on incident detection, response, and vulnerability remediation
+ Relevant certifications such as CISSP, CISM, CISA, or GIAC certifications are preferred
+ Solid understanding of networking protocols, operating systems (Linux, Windows), MiddleTier, Database, cloud computing and end point computing management
+ Excellent communication skills with the ability to effectively communicate technical concepts to both technical and non-technical stakeholders
+ Proven leadership abilities with experience leading security projects and initiatives independently
+ Experience with security tools such as SIEM platforms, intrusion detection/prevention systems, and endpoint security solutions
+ Ability to work independently and collaboratively in a fast-paced environment
+ Strong analytical and problem-solving skills with a keen attention to detail
Career Level - IC4
**Responsibilities**
+ Oversee and manage internal audit processes to ensure adherence to security and compliance standards
+ Act as the primary liaison between internal teams, facilitating effective communication and collaboration to ensure audits are completed efficiently and accurately
+ Assess the effectiveness of security controls and ensure auditing requirements are clearly documented, defined and communicated to necessary teams
+ Ensure the timely and accurate sharing of data across departments to support successful audit outcomes
+ Continuously assess and enhance the organization's security posture by addressing any identified weaknesses
+ Lead and manage departmental risk management programs, ensuring alignment with broader organizational risk mitigation strategies
+ Facilitate and drive disaster recovery (DR) planning and preparedness across departments to minimize operational disruptions in case of incidents
+ Collaborate with cross-functional teams to establish and maintain robust security policies and procedures, ensuring alignment with industry best practices
+ Make recommendations and provide guidance/consultation regarding process improvements necessary for remediating internal control gaps. Engage with required teams to close the gap
+ Develop and maintain cybersecurity documentation such as the System Security Plan (SSP), Privacy Impact Assessment (PIA), Configuration Management Plan (CMP), Plan of Action and Milestones (POA&M), and Standard Operating Procedures (SOP) as necessary
+ Develop, implement, and maintain industry best practices and regulatory security policies, procedures, and system standards (servers, databases, endpoints, and application design)
+ Engagement in cloud security technologies and protocols, including cloud security architecture, identity and access management, and data protection
+ Write stakeholder reports to explain the assessment, audit results, and recommendations. Create and provide metrics for cybersecurity leadership. Brief executive leadership on compliance matters
**About Us**
As a world leader in cloud solutions, Oracle uses tomorrow's technology to tackle today's challenges. We've partnered with industry-leaders in almost every sector-and continue to thrive after 40+ years of change by operating with integrity.
We know that true innovation starts when everyone is empowered to contribute. That's why we're committed to growing an inclusive workforce that promotes opportunities for all.
Oracle careers open the door to global opportunities where work-life balance flourishes. We offer competitive benefits based on parity and consistency and support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs.
We're committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing or by calling in the United States.
Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans' status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.

**Job Description**
At Oracle Cloud Infrastructure (OCI) we build the future of the cloud for Enterprises. We act with the speed and attitude of a start-up along with the scale and customer focus of the leading enterprise software company in the world.
**About the team:**
The Enterprise Engineering SRE team is tasked with ensuring the security and compliance of internal systems by conducting regular audits, identifying potential gaps in existing standards and proactively improving the organization's overall security posture. The team plays a critical role in safeguarding the integrity, confidentiality and availability of all systems while driving risk management initiatives across departments including disaster recovery planning and execution. We are also responsible for liaising with various internal teams during audits, ensuring data sharing is concise, accurate and aligned for successful audit outcomes.
**Ideally, the candidate will possess several of the following skills:**
Supports the strengthening of Oracle's security posture, focusing on one or more of the following: regulatory compliance; risk management; incident management and response; security policy development and enforcement; Threat and Vulnerability Management; Incident Management and response and similar focus areas.
+ **Regulatory Compliance:** Brings advanced level skills to manage programs to establish, document and track compliance to industry and government standards and regulations, e.g. ISO-27001, PCI-DSS, HIPAA, FedRAMP, CMMC, GDPR, etc. Researches and interprets current and pending governmental laws and regulations, industry standards and customer and vendor contracts to communicate compliance requirements to the business. Participates in industry forums monitoring developments in regulatory compliance
+ **Risk Management:** Brings advanced level skills to assess the information security risk associated with existing and proposed business operational programs, systems, applications, practices and procedures in very complex, business-critical environments. Conduct and document very complex information security risk assessments and assist in the creation and implementation of security solutions and programs
+ **Cloud Security:** In-dept knowledge of cloud security principles and best practices, including securing cloud infrastructure, services, and applications in platforms, OCI experience is a plus
+ **Threat and Vulnerability Management:** Brings advanced level skills to research, evaluate, track, and manage information security threats and vulnerabilities in situations where in-depth analysis of ambiguous information is required
+ **Incident Management and response:** Brings advanced level skills to respond to security events and responding in line with Oracle incident response playbooks to mitigate vulnerabilities
+ Mentors and trains other team members
+ Compiles information and reports for management
**Qualifications:**
+ Bachelor's degree in computer science, Information Security, or a related field. Master's degree preferred
+ 8+ years of experience in information systems, business operations, or related fields,
+ 3+ years of experience in security operations, with a focus on incident detection, response, and vulnerability remediation
+ Relevant certifications such as CISSP, CISM, CISA, or GIAC certifications are preferred
+ Solid understanding of networking protocols, operating systems (Linux, Windows), MiddleTier, Database, cloud computing and end point computing management
+ Excellent communication skills with the ability to effectively communicate technical concepts to both technical and non-technical stakeholders
+ Proven leadership abilities with experience leading security projects and initiatives independently
+ Experience with security tools such as SIEM platforms, intrusion detection/prevention systems, and endpoint security solutions
+ Ability to work independently and collaboratively in a fast-paced environment
+ Strong analytical and problem-solving skills with a keen attention to detail
Career Level - IC4
**Responsibilities**
+ Oversee and manage internal audit processes to ensure adherence to security and compliance standards
+ Act as the primary liaison between internal teams, facilitating effective communication and collaboration to ensure audits are completed efficiently and accurately
+ Assess the effectiveness of security controls and ensure auditing requirements are clearly documented, defined and communicated to necessary teams
+ Ensure the timely and accurate sharing of data across departments to support successful audit outcomes
+ Continuously assess and enhance the organization's security posture by addressing any identified weaknesses
+ Lead and manage departmental risk management programs, ensuring alignment with broader organizational risk mitigation strategies
+ Facilitate and drive disaster recovery (DR) planning and preparedness across departments to minimize operational disruptions in case of incidents
+ Collaborate with cross-functional teams to establish and maintain robust security policies and procedures, ensuring alignment with industry best practices
+ Make recommendations and provide guidance/consultation regarding process improvements necessary for remediating internal control gaps. Engage with required teams to close the gap
+ Develop and maintain cybersecurity documentation such as the System Security Plan (SSP), Privacy Impact Assessment (PIA), Configuration Management Plan (CMP), Plan of Action and Milestones (POA&M), and Standard Operating Procedures (SOP) as necessary
+ Develop, implement, and maintain industry best practices and regulatory security policies, procedures, and system standards (servers, databases, endpoints, and application design)
+ Engagement in cloud security technologies and protocols, including cloud security architecture, identity and access management, and data protection
+ Write stakeholder reports to explain the assessment, audit results, and recommendations. Create and provide metrics for cybersecurity leadership. Brief executive leadership on compliance matters
**About Us**
As a world leader in cloud solutions, Oracle uses tomorrow's technology to tackle today's challenges. We've partnered with industry-leaders in almost every sector-and continue to thrive after 40+ years of change by operating with integrity.
We know that true innovation starts when everyone is empowered to contribute. That's why we're committed to growing an inclusive workforce that promotes opportunities for all.
Oracle careers open the door to global opportunities where work-life balance flourishes. We offer competitive benefits based on parity and consistency and support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs.
We're committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing or by calling in the United States.
Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans' status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.

**Make an impact with NTT DATA**
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion - it's a place where you can grow, belong and thrive.
**Your day at NTT DATA**
The Security Managed Services Engineer (L2) is a developing engineering role, responsible for providing a managed service to clients to ensure that their Security Infrastructures and systems remain operational.
Through the proactive monitoring, identifying, investigating, and resolving of technical incidents and problems, this role is able to restore service to clients.
The primary objective of this role is to proactively review client requests or tickets and apply technical/process knowledge to resolve them without breaching service level agreement (SLA) and focuses on second-line support for incidents and requests with a medium level of complexity.
The Security Managed Services Engineer (L2) may also contribute to / support on project work as and when required.
**What you'll be doing**
**Key Responsibilities:**
+ Proactively monitors the work queues.
+ Performs operational tasks to resolve all incidents/requests in a timely manner and within the agreed SLA.
+ Updates tickets with resolution tasks performed.
+ Identifies, investigates, analyses issues and errors prior to or when they occur, and logs all such incidents in a timely manner.
+ Captures all required and relevant information for immediate resolution.
+ Provides second level support to all incidents, requests and identifies the root cause of incidents and problems.
+ Communicates with other teams and clients for extending support.
+ Executes changes with clear identification of risks and mitigation plans to be captured into the change record.
+ Follows the shift handover process highlighting any key tickets to be focused on along with a handover of upcoming critical tasks to be carried out in the next shift.
+ Escalates all tickets to seek the right focus from CoE and other teams, if needed continue the escalations to management.
+ Works with automation teams for effort optimization and automating routine tasks.
+ Ability to work across various other resolver group (internal and external) like Service Provider, TAC, etc.
+ Identifies problems and errors before they impact a client's service.
+ Provides Assistance to L1 Security Engineers for better initial triage or troubleshooting.
+ Leads and manages all initial client escalation for operational issues.
+ Contributes to the change management process by logging all change requests with complete details for standard and non-standard including patching and any other changes to Configuration Items.
+ Ensures all changes are carried out with proper change approvals.
+ Plans and executes approved maintenance activities.
+ Audits and analyses incident and request tickets for quality and recommends improvements with updates to knowledge articles.
+ Produces trend analysis reports for identifying tasks for automation, leading to a reduction in tickets and optimization of effort.
+ May also contribute to / support on project work as and when required.
+ May work on implementing and delivering Disaster Recovery functions and tests.
+ Performs any other related task as required.
**Knowledge and Attributes:**
+ Ability to communicate and work across different cultures and social groups.
+ Ability to plan activities and projects well in advance, and takes into account possible changing circumstances.
+ Ability to maintain a positive outlook at work.
+ Ability to work well in a pressurized environment.
+ Ability to work hard and put in longer hours when it is necessary.
+ Ability to apply active listening techniques such as paraphrasing the message to confirm understanding, probing for further relevant information, and refraining from interrupting.
+ Ability to adapt to changing circumstances.
+ Ability to place clients at the forefront of all interactions, understanding their requirements, and creating a positive client experience throughout the total client journey.
**Academic Qualifications and Certifications:**
+ Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).
+ Certifications relevant to services supported. Certifications carry additional weightage on the candidate's qualification for the role.
+ CCNA certification in must, CCNP in Security or PCNSE certification is good to have.
**Required Experience:**
+ Moderate level of relevant managed services experience handling Security Infrastructure.
+ Moderate level of knowledge in ticketing tools preferably Service Now.
+ Moderate level of working knowledge of ITIL processes.
+ Moderate level of experience working with vendors and/or 3rd parties.
**Workplace type** **:**
On-site Working
**About NTT DATA**
NTT DATA is a $30+ billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long-term success. We invest over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity. We are also one of the leading providers of digital and AI infrastructure in the world. NTT DATA is part of NTT Group and headquartered in Tokyo.
**Equal Opportunity Employer**
NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.

Information Security Analyst - PAM specialist
As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients' best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our **Foundational Services** teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful. We design our digital architecture and ensure our platforms provide a first-class customer experience. Our operations teams manage risk, resources, and program management. We focus on enterprise resiliency and business continuity. We develop, coordinate, and execute strategic operational plans. Essentially, Foundational Services re-engineers client and partner processes to deliver excellence through secure, reliable, and controlled services.
Trust is part of our DNA at Citi. As such, we take safeguarding our customer data very seriously. The Cloud Technology Services (CTS) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi's and our clients' assets and information. We manage information security as an end-to-end program - one with a clear mandate and accountability. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks, fully aligned with the technology of the firm, threat-focused and data-driven, and deeply integrated across all Citi businesses globally.
Being talent-driven, we are focused on attracting, developing, and retaining diverse and inclusive talent with a high technical skill level. As a member of our team we will provide you with career development opportunities at all stages of your career. Our employees model a passion for protecting Citi and our clients and believe in treating others with dignity and respect.
This is an opportunity to work with Global Secrets Management Platforms team which is part of Citi's Cloud Technology Services. We are responsible for secrets management on-prem and the cloud for several hundred applications across the firm.
Our commitment to diversity includes a workforce that represents the clients we serve globally from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We'll enable growth and progress together.
**Information Security Analyst - PAM specialist**
We are opening our doors for talented individuals who are passionate about Cyber Security, want to be part of innovation by implementing and driving cutting edge technologies within a world class organization.
If you have a background in technology and interested to learn and grow with a world class Cyber Security team, then Citi is a place for you to be.
**Responsibilities:**
+ Provide BAU support for secrets management applications like CyberArk, HashiCorp Vault.
+ Collaborate with various internal and external stakeholders/support teams as required to support the application and business needs.
+ Work with client applications to provide integration/onboarding guidance.
+ Identify security vulnerabilities in the system and implement necessary solutions to remediate the vulnerabilities.
+ Strong Automation experience - Identify manual processes that can be smartly automated.
+ Ensure security best practice is followed and provide solutions to improve existing infrastructure processes in the company.
+ Be involved in the design and subsequent implementation of software and service infrastructure.
+ Provide on-call support in rotation as required.
+ Gather requirements and provide walkthroughs to businesses on usage of various SDKs and API services available for integration with Secrets/Identity and Access Management applications.
**Qualifications:**
+ 5+ Years' experience
+ Bachelor's in Engineering Degree (Computer Science or Equivalent)
+ Any trainings/certifications in Cybersecurity will be considered a plus
**Critical Competencies:**
+ CyberArk, HashiCorp Vault experience will be a big plus.
+ Basic experience working with one or more of these scripting languages - Python, Unix Shell, Perl, Go & PowerShell scripting.
+ Experience with one or more server operating system like Linux, Windows.
+ Experience/basic understanding of CHEF, Ansible, Terraform, CI/CD.
+ Experience with one or more cloud providers such as AWS, GCP, AZURE.
+ Understanding of containers and associated technologies like Kubernetes/OpenShift.
+ Excellent written and verbal communication skills
+ Ability to work across all levels of the organization.
+ Must have good analytical skills.
+ Strong customer and quality-focus.
+ Sound problem resolution, judgment, and decision-making skills .
+ Ability to work well individually and as part of a team.
**About Citi**
Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.
Additional information may be found at | Twitter: @Citi ( | YouTube: | Blog: | Facebook: | LinkedIn: .
---
**Job Family Group:**
Technology
---
**Job Family:**
Information Security
---
**Time Type:**
Full time
---
**Most Relevant Skills**
Please see the requirements listed above.
---
**Other Relevant Skills**
For complementary skills, please see above and/or contact the recruiter.
---
_Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law._
_If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review_ _Accessibility at Citi ( _._
_View Citi's_ _EEO Policy Statement ( _and the_ _Know Your Rights ( _poster._
Citi is an equal opportunity and affirmative action employer.
Minority/Female/Veteran/Individuals with Disabilities/Sexual Orientation/Gender Identity.

**Job title** : _Business Analyst - Workday Security_
**_Location:_** **_Bogotá, Colombia_**
**_About the job_**
_We are looking for a_ **_Business Analyst - Workday Security_** _to join our People & Culture Digital Team. In this role, you will support the design, configuration, and management of Workday's security model, ensuring that our systems meet business needs while staying secure and user-friendly. You'll collaborate with HR, IT, and other stakeholders to troubleshoot, optimize processes, and contribute to building a strong and growing global team._
**_Ready to push the limits of what's possible?_** _Join Sanofi in one of our corporate functions and you can play a vital part in the performance of our entire business while helping to make an impact on millions around the world. As a_ **_Business Analyst - Workday Security_** _within our_ **_People & Culture Digital Team_** _, you'll help shape and manage Workday's security framework, ensuring our systems remain secure, efficient, and aligned with business needs while contributing to the growth of a new, global team._
**Main responsibilities:**
+ Collaborate with HR, IT, and business teams to gather and document security requirements in Workday.
+ Analyze current security configurations, identify gaps, and recommend improvements.
+ Support the design and configuration of role-based security within Workday.
+ Troubleshoot and resolve user access and security issues in collaboration with the team.
+ Create clear documentation such as process flows, requirements, and security design.
+ Coordinate and support user acceptance testing (UAT) to validate security configurations.
+ Provide guidance and training to stakeholders on security roles, access, and policies.
**_About you:_**
**Experience** :
+ Practical experience working with **Workday Security** , including configuration and troubleshooting of access and roles.
**Soft and technical skills** :
+ Strong analytical and problem-solving abilities, especially in complex security scenarios.
+ Clear communication skills, able to explain technical concepts to non-technical stakeholders.
+ Comfortable collaborating in a cross-functional, global environment and connecting different business needs.
**Education** :
+ _Bachelor's degree in Business, HR, IT, or a related field._
**Languages** :
+ English proficiency required.
**_Why choose us?_**
+ Discover endless opportunities to grow your talent and drive your career, whether it's through a promotion or lateral move, at home or internationally.
+ You'll be part of leading the first experiences a job seeker has with Sanofi and ensuring it is best-in-class and driving conversions.
+ You'll be part of a truly diverse cross-cultural team and can have real business impact.
+ Flexible working policies, including up to 50% remote work.
+ Private medical care, life and health insurance, and gender-neutral paid parental leave
+ Colombia is one of Sanofi's key locations for new talents, having a big footprint with the Bogota HUB and its best-in-class operation.
+ Mexico and Argentina Play an instrumental part in creating best practice and innovation within our 3 vaccines production plants.
**Pursue** _Progress_ . **Discover** _Extraordinary_ .
Progress doesn't happen without people - people from different backgrounds, in different locations, doing different roles, all united by one thing: a desire to make miracles happen. You can be one of those people. Chasing change, embracing new ideas and exploring all the opportunities we have to offer. Let's pursue progress. And let's discover extraordinary together.
At Sanofi, we provide equal opportunities to all regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, or gender identity.
Watch our ALL IN video ( and check out our Diversity Equity and Inclusion actions at sanofi.com ( !
#LI-LAT
#LI-Hybrid
**Pursue** **_progress_** **, discover** **_extraordinary_**
Better is out there. Better medications, better outcomes, better science. But progress doesn't happen without people - people from different backgrounds, in different locations, doing different roles, all united by one thing: a desire to make miracles happen. So, let's be those people.
At Sanofi, we provide equal opportunities to all regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, ability or gender identity.
Watch our ALL IN video ( and check out our Diversity Equity and Inclusion actions at sanofi.com ( !
Global Terms & Conditions and Data Privacy Statement ( is dedicated to supporting people through their health challenges. We are a global biopharmaceutical company focused on human health. We prevent illness with vaccines, provide innovative treatments to fight pain and ease suffering. We stand by the few who suffer from rare diseases and the millions with long-term chronic conditions.
With more than 100,000 people in 100 countries, Sanofi is transforming scientific innovation into healthcare solutions around the globe. Discover more about us visiting or via our movie We are Sanofi ( an organization, we change the practice of medicine; reinvent the way we work; and enable people to be their best versions in career and life. We are constantly moving and growing, making sure our people grow with us. Our working environment helps us build a dynamic and inclusive workplace operating on trust and respect and allows employees to live the life they want to live.
All in for Diversity, Equity and Inclusion at Sanofi - YouTube (