217 Conducting Security Audits jobs in Mumbai
DCO – Risk & Control Assessment (RCA) – AVP
Mumbai, Maharashtra
Deutsche Bank
Posted today
Job Viewed
Job Description
Description
Divisional Control Office (DCO) team ensures that the division operates with high levels of integrity. It is responsible for supporting the business by developing, implementing and maintaining a risk culture to ensure a strong and sustainable business control environment whilst minimizing risk arising from non-financial risk factors. DCO strategy includes improving the risk management information and strengthening the governance and risk culture.
The Corporate Bank (CB) DCO has functional responsibility for providing a central point of oversight over the CB Risk & Control Assessments (RCA).
This includes supporting the business by driving Risk & Control Assessment specifically focusing on Information Security (IS) / Information Technology (IT) risks in line with NFRM guidelines. RCA is a key component of the bank's non-financial risk management toolkit, to enable the effective profiling, monitoring and management of operational risks.
What we will offer you
As part of our flexible scheme, here are just some of the benefits that you’ll enjoy
Your Key Responsibilities
Your Skills & Qualifications:
How we’ll support you
This advertiser has chosen not to accept applicants from your region.
0
AVP/Sr Manager - AI/ML Security Risk Assessment Specialist with a Large Private Bank
Mumbai, Maharashtra
Riverforest Connections Private Limited
Posted today
Job Viewed
Job Description
Job Summary
The AIML Security Risk Assessment Specialist will play a critical role in validating reports and making final risk assessments for AIML models used in various business applications and use cases. This role will work closely with the Digital Risk Management Portfolio team to ensure the security and integrity of AIML models, use case along with applications.
Key Responsibilities
- Risk Assessment: understand the business requirement, finalise the scope and perform end to end risk assessment.
- Validate reports from various sources and make final risk assessments for AIML models, considering factors such as data quality, model performance, and potential security threats.
- Conduct Security Risk assessment for GenAI models, tools, and platforms risk assessment.
- Perform in-depth risk assessments of GenAI systems and associated data pipelines, both internally developed and third party.
- Evaluate the risk profile of different model architectures (e.g. transformer-based LLMs, multimodal models) and deployment types (cloud, edge, open-source, API-based)
- AIML Model Review: Review AIML models for potential security vulnerabilities, including data poisoning, model evasion, and adversarial attacks.
- Report Analysis: Analyse reports from AIML model testing and validation teams to identify potential security risks and provide recommendations for mitigation.
- Risk Classification: Classify risks associated with AIML models and provide recommendations for risk mitigation and remediation.
- Collaboration: Work closely with cross-functional teams, including data science, engineering, and security, to ensure secure AIML system development and deployment.
- Review AIML use cases and provide assurance/feedback/confirmation on feedback.
- Reasonable understanding on LLM security, Agentic and RAG security
Required Skills
- AIML Fundamentals: Strong understanding of AIML concepts, including machine learning, pipelines, model architecture deep learning, and natural language processing.
- Secure software development and MLOps (DevSecOps Principles)
- Hands-on experience with GenAI toolkits and APIs (e.g. OpenAI, Claude, Bard, LLaMA, Hugging face transformers.
- Security Expertise: Experience with security risk assessment, threat modelling, and vulnerability management.
- Analytical Skills: Excellent analytical and problem-solving skills, with the ability to interpret complex data and reports.
- Communication: Strong communication and collaboration skills, with the ability to provide clear and concise recommendations.
Experience
- Experience with AIML Security Frameworks: Familiarity with AIML security frameworks and guidelines Gartner / NIST 100 / ISO 42001
- Knowledge of Regulatory Requirements: Understanding of regulatory requirements, such as GDPR, HIPAA, or CCPA.
- Experience with Risk Management: Familiarity with risk management frameworks and methodologies, such as NIST or ISO 27001, ISO 31000.
- Experience overall in Information & cyber security domain
- Understanding of BFSI domain so that terms like DPSC, payments ecosystem, API banking, Cloud, IAM, application security etc in context of risk assessment and management.
Education
- Bachelor's or Master's degree in Computer Science, Information Security, or related field.
- Minimum 7-15 years of experience with 2-3 years of experience* in AIML / GenAI security, risk management, or related field.
- CISA, CISM or at least AIML security certification
This job description highlights the key responsibilities and required skills for an AIML / GenAI Security Risk Assessment Specialist role. The focus is on validating reports, making final risk assessments, and providing recommendations for risk mitigation and remediation.
This advertiser has chosen not to accept applicants from your region.
1
FIC Risk and Control Assessment (RCA) - #VeteranHiring
Mumbai, Maharashtra
Deutsche Bank
Posted today
Job Viewed
Job Description
Description
The BCU team is principally responsible for:
In addition to working closely with the business heads, the group’s reach and interaction is broad, including engagement with the Corporate Relationship Management (Coverage) Divisional Control Officer (DCO) and those functions forming the 2nd and 3rd LoD, for example Compliance, Anti Financial Crime (AFC), Non-Financial Risk Management (NFRM), Legal, Group Audit and others. This role will be to support the Global BCU function in various capacities.
What we’ll offer you
As part of our flexible scheme, here are just some of the benefits that you’ll enjoy
Your key responsibilities
The Candidate within the team would be primarily responsible for RCA and would be required to: -
Candidate would also be responsible for: -
Your skills and experience
How we’ll support you
This advertiser has chosen not to accept applicants from your region.
2
Information Security Manager
Mumbai, Maharashtra
Burns & McDonnell
Posted 17 days ago
Job Viewed
Job Description
**Description**
This position is responsible for the leadership of the India Information Security (IS) department as part of the Global Information Security Directorate. Areas of responsibility will include coordination with the other IS Departments to ensure standard enforcement of security polices and controls, interfacing with local India IT teams and business leaders, and mitigating risks to the organization's information assets.
**Responsibilities :**
+ Manage India Information Security team's day to day operations.
+ Support the global Security Operations (SecOps) department to safeguard digital assets by assisting with detecting, investigating, and resolving cybersecurity threats
+ Assist the global Governance, Risk & Compliance (GRC) department with enforcing cybersecurity policies, overseeing cybersecurity risk, facilitating cybersecurity compliance audits, and conducting cybersecurity awareness training.
+ Assist the global Cybersecurity Infrastructure and Design (CID) department with management and maintenance of the cybersecurity systems, platforms, and controls.
+ Implement Secure Software Development Lifecycle (SSDLC) in India office by enforcing the compliance of global policies, processes, procedures and principles.
**Qualifications**
+ Bachelor's degree in Cyber/Information Security or Information Technology, Computer Science, Computer Engineering
+ Professional certifications such as CISSP, CISM, or equivalent multi-domain cybersecurity focused certification.
+ At least 10 years of experience in IT security management, with a proven track record of managing teams in global matrix environment
+ Experience with security technologies: EDR, SIEM, SOAR, CASM, CASB, CSPM, IAM, PAM
+ Excellent communication and interpersonal skills to effectively engage internal stakeholders.
+ Demonstrated ability to analyze complex security issues, devise solutions, and enforce established security controls.
+ Strong leadership skills to drive standardization of processes, procedures, and principles.
**Job** Engineering
**Primary Location** India-Maharashtra-Mumbai
**Schedule:** Full-time
**Travel:** No
**Req ID:**
**Job Hire Type** Experienced Not Applicable #BMI N/A
This position is responsible for the leadership of the India Information Security (IS) department as part of the Global Information Security Directorate. Areas of responsibility will include coordination with the other IS Departments to ensure standard enforcement of security polices and controls, interfacing with local India IT teams and business leaders, and mitigating risks to the organization's information assets.
**Responsibilities :**
+ Manage India Information Security team's day to day operations.
+ Support the global Security Operations (SecOps) department to safeguard digital assets by assisting with detecting, investigating, and resolving cybersecurity threats
+ Assist the global Governance, Risk & Compliance (GRC) department with enforcing cybersecurity policies, overseeing cybersecurity risk, facilitating cybersecurity compliance audits, and conducting cybersecurity awareness training.
+ Assist the global Cybersecurity Infrastructure and Design (CID) department with management and maintenance of the cybersecurity systems, platforms, and controls.
+ Implement Secure Software Development Lifecycle (SSDLC) in India office by enforcing the compliance of global policies, processes, procedures and principles.
**Qualifications**
+ Bachelor's degree in Cyber/Information Security or Information Technology, Computer Science, Computer Engineering
+ Professional certifications such as CISSP, CISM, or equivalent multi-domain cybersecurity focused certification.
+ At least 10 years of experience in IT security management, with a proven track record of managing teams in global matrix environment
+ Experience with security technologies: EDR, SIEM, SOAR, CASM, CASB, CSPM, IAM, PAM
+ Excellent communication and interpersonal skills to effectively engage internal stakeholders.
+ Demonstrated ability to analyze complex security issues, devise solutions, and enforce established security controls.
+ Strong leadership skills to drive standardization of processes, procedures, and principles.
**Job** Engineering
**Primary Location** India-Maharashtra-Mumbai
**Schedule:** Full-time
**Travel:** No
**Req ID:**
**Job Hire Type** Experienced Not Applicable #BMI N/A
This advertiser has chosen not to accept applicants from your region.
3
Information Security Analyst
400001 Mumbai, Maharashtra
₹120000 Annually
WhatJobs
Posted today
Job Viewed
Job Description
Our client is seeking a skilled and vigilant Information Security Analyst to join their entirely remote security operations team. This role is crucial for safeguarding our client's digital assets and ensuring compliance with relevant security standards. You will be responsible for monitoring network traffic, identifying potential security threats, and implementing robust security measures to prevent breaches. As a remote-first position, you will collaborate closely with IT and development teams to assess vulnerabilities, conduct security audits, and develop incident response plans. Your duties will include analyzing security alerts, performing penetration testing, and staying current with the latest cybersecurity threats and mitigation techniques. You will also be involved in developing and delivering security awareness training to employees. The ideal candidate will have a strong understanding of cybersecurity principles, network security, cryptography, and risk management. Experience with security information and event management (SIEM) tools, intrusion detection/prevention systems (IDS/IPS), and firewall management is essential. You should possess excellent analytical and problem-solving skills, with the ability to respond effectively to security incidents. Certification such as CISSP, CompTIA Security+, or CEH is highly desirable. This is an excellent opportunity to contribute to a critical function within a leading organization while working remotely. You will have the chance to work on challenging security issues and continuously expand your knowledge base. We are looking for a self-starter who can work independently and manage their time effectively to protect our client's information assets. Your expertise will be vital in maintaining a secure operational environment for our client. If you are passionate about cybersecurity and looking for a challenging remote role, we encourage you to apply. Join our client's dedicated security team and make a real impact in protecting sensitive data.
This advertiser has chosen not to accept applicants from your region.
4
Information Security Architect
400601 Thane, Maharashtra
₹90000 month
WhatJobs
Posted 5 days ago
Job Viewed
Job Description
Our client is seeking an experienced Information Security Architect to design and implement robust security solutions in **Thane, Maharashtra**. This role is critical in safeguarding our organization's information assets and ensuring compliance with industry regulations. You will be responsible for developing enterprise-wide security strategies, designing secure network architectures, and evaluating and recommending security technologies. Key duties include identifying security risks, developing security policies and standards, leading security assessments, and providing technical guidance to IT teams. The ideal candidate will possess a Master's degree in Computer Science, Information Technology, or a related field, with extensive experience in security architecture and design. Deep knowledge of cloud security, network security, data protection, and risk management frameworks (e.g., NIST, ISO 27001) is essential. Certifications such as CISSP-ISSAP, CISM, or SABSA are highly preferred. Excellent analytical, problem-solving, and strategic planning skills are required. Strong communication and interpersonal skills are needed to collaborate with stakeholders at all levels and articulate complex security concepts effectively. You will play a vital role in shaping our security posture and protecting our critical infrastructure against evolving threats. This position offers a significant opportunity for career growth in a dynamic and challenging cybersecurity landscape.
This advertiser has chosen not to accept applicants from your region.
5
Information Security Analyst
400001 Mumbai, Maharashtra
₹900000 Annually
WhatJobs
Posted 6 days ago
Job Viewed
Job Description
Our client, a prominent financial services firm, is actively seeking a skilled Information Security Analyst to bolster its cybersecurity defenses. This fully remote position offers a unique chance to safeguard sensitive data and critical infrastructure from a wide array of cyber threats. The ideal candidate will possess a comprehensive understanding of cybersecurity principles, risk management, and threat detection methodologies. You will be responsible for monitoring security systems, analyzing security alerts, and investigating potential security incidents. This includes conducting vulnerability assessments, performing penetration testing, and developing remediation strategies to mitigate identified risks. Your role will also involve staying current with the latest security threats, vulnerabilities, and technologies, and translating this knowledge into proactive defense measures. Collaboration with IT teams and business units is essential to ensure security policies and procedures are effectively implemented and maintained across the organization. You will contribute to the development and improvement of security awareness training programs for employees. The successful applicant will hold a Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, and possess relevant certifications such as CISSP, CEH, or Security+. Demonstrable experience in network security, endpoint security, incident response, and security information and event management (SIEM) tools is required. Strong analytical and problem-solving skills, coupled with excellent communication abilities, are crucial for this role. You should be adept at explaining complex technical security concepts to both technical and non-technical stakeholders. We are looking for a vigilant and proactive individual who is passionate about cybersecurity and committed to protecting the organization's digital assets. This remote role provides the flexibility to work from anywhere in India, contributing to a robust security posture.
Key Responsibilities:
Key Responsibilities:
- Monitor security alerts and investigate potential security incidents.
- Conduct vulnerability assessments and penetration testing.
- Develop and implement security policies and procedures.
- Analyze security threats and recommend mitigation strategies.
- Assist in the development of incident response plans.
- Perform security configuration reviews and audits.
- Contribute to security awareness training.
- Stay updated on emerging cybersecurity threats and technologies.
- Collaborate with IT teams on security best practices.
- Bachelor's degree in Computer Science, IT, or Cybersecurity.
- 2-4 years of experience in information security or cybersecurity.
- Relevant certifications (e.g., CISSP, CEH, Security+).
- Experience with SIEM, IDS/IPS, and endpoint security solutions.
- Strong understanding of network security principles.
- Excellent analytical and problem-solving skills.
- Effective communication and interpersonal abilities.
This advertiser has chosen not to accept applicants from your region.
Be The First To Know
About the latest Conducting security audits Jobs in Mumbai !
6
Information Security Architect
400601 Thane, Maharashtra
₹1800000 Annually
WhatJobs
Posted 6 days ago
Job Viewed
Job Description
Our client is seeking a seasoned Information Security Architect to lead the design and implementation of robust security solutions. This role is crucial in safeguarding our digital assets and ensuring compliance with industry standards. The Information Security Architect will be responsible for developing and maintaining the organization's security architecture, policies, and procedures. You will assess current security measures, identify vulnerabilities, and design layered security strategies to mitigate risks. This involves staying current with emerging threats and technologies, and proactively integrating advanced security controls. Key responsibilities include architecting secure cloud environments (AWS, Azure, GCP), designing network security infrastructure (firewalls, IDS/IPS), implementing identity and access management (IAM) solutions, and developing data loss prevention (DLP) strategies. You will also play a key role in incident response planning and execution, vulnerability management, and security awareness training. The ideal candidate will have a strong understanding of security frameworks such as ISO 27001, NIST, and SOC 2. Excellent analytical and problem-solving skills are essential, along with the ability to communicate complex technical concepts to both technical and non-technical stakeholders. You will collaborate closely with IT operations, development teams, and business units to ensure security is embedded into all aspects of the organization. This is a hybrid role requiring presence in the Thane office on occasion for key meetings and collaborative sessions. Minimum qualifications include a Bachelor's degree in Computer Science, Information Technology, or a related field, and a minimum of 10 years of experience in information security, with at least 5 years in an architectural or senior engineering role. Relevant certifications such as CISSP, CISM, or CCSP are highly preferred. If you are passionate about cybersecurity and have a proven track record in designing and implementing enterprise-level security solutions, we invite you to apply.
This advertiser has chosen not to accept applicants from your region.
7
Information Security Analyst
400001 Mumbai, Maharashtra
₹60000 month
WhatJobs
Posted 7 days ago
Job Viewed
Job Description
Our client, a leader in financial technology services, is seeking a diligent and analytical Information Security Analyst to join their team. This role requires a blend of on-site collaboration and remote flexibility. You will be instrumental in protecting the company's information assets and ensuring the integrity, confidentiality, and availability of its systems and data. Key responsibilities include monitoring security alerts and events, performing vulnerability assessments and penetration testing, and responding to security incidents. You will also contribute to the development and implementation of security policies, procedures, and controls to mitigate risks. The ideal candidate will have a strong understanding of cybersecurity principles, network security, cryptography, and risk management frameworks. Experience with security tools such as SIEM, IDS/IPS, firewalls, and endpoint detection and response (EDR) solutions is essential. You will conduct security audits, analyze security trends, and provide recommendations for improving the overall security posture of the organization. This role involves collaborating with IT teams, development teams, and business units to embed security best practices throughout the organization. We are looking for a proactive individual with excellent problem-solving skills and a commitment to staying current with the evolving threat landscape. Your expertise will be crucial in safeguarding sensitive company and customer data against cyber threats.
Responsibilities:
Qualifications:
Responsibilities:
- Monitor security systems for potential threats and anomalies.
- Investigate and respond to security incidents and breaches.
- Conduct vulnerability assessments and penetration testing.
- Implement and maintain security controls and countermeasures.
- Develop and update security policies, procedures, and guidelines.
- Perform regular security audits and compliance checks.
- Analyze security trends and recommend improvements to the security posture.
- Collaborate with IT and development teams on secure system design and implementation.
- Provide security awareness training to employees.
- Stay current with emerging cybersecurity threats and technologies.
Qualifications:
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Proven experience in information security or cybersecurity roles.
- Strong understanding of cybersecurity principles, best practices, and frameworks (e.g., NIST, ISO 27001).
- Proficiency with security tools such as SIEM, IDS/IPS, firewalls, and EDR solutions.
- Experience with vulnerability assessment and penetration testing methodologies.
- Excellent analytical, problem-solving, and critical thinking skills.
- Strong communication and interpersonal skills.
- Ability to work effectively in both a remote and office environment.
- Relevant security certifications (e.g., CISSP, CompTIA Security+) are a plus.
This advertiser has chosen not to accept applicants from your region.
8
Information Security Analyst
400601 Thane, Maharashtra
₹70000 Annually
WhatJobs
Posted 7 days ago
Job Viewed
Job Description
Our client is seeking a vigilant and skilled Information Security Analyst to fortify their digital defenses. This fully remote position is critical for maintaining the integrity and security of our client's IT infrastructure. You will be responsible for identifying vulnerabilities, implementing security measures, monitoring systems for threats, and responding to security incidents. Key duties include conducting security assessments, developing and enforcing security policies, managing security awareness training, and staying abreast of the latest cybersecurity trends and best practices. The ideal candidate will possess a strong understanding of network security, data privacy, risk management, and security frameworks such as ISO 27001 or NIST. Certifications like CompTIA Security+, CEH, or CISSP are highly advantageous. Proficiency in security tools, including intrusion detection/prevention systems, firewalls, and SIEM solutions, is essential. You will need exceptional analytical and problem-solving skills to investigate security breaches and implement effective countermeasures. This role demands a high level of integrity, attention to detail, and the ability to work independently and efficiently in a remote setting. You will collaborate with IT teams to integrate security into all aspects of the technology stack. This is an excellent opportunity to play a pivotal role in protecting sensitive information and ensuring the operational continuity of our client's business. Your expertise will be vital in safeguarding our client's digital assets and reputation against evolving cyber threats. Continuous learning and adaptation to the dynamic landscape of cybersecurity are paramount for success. You will be an integral part of a team dedicated to maintaining a secure and compliant technological environment.
This advertiser has chosen not to accept applicants from your region.
9