Security Advisor Job Vacancies in Bangalore

5+ years in SAP Security with 1 S4h implementation exp

The major focus will be on Application Penetration testing followed by Network Penetration Testing and Mobile Security assessments, Red Team Assessment, Phishing, IoT, Cloud Pen testing (Azure and AWS, Google Cloud), Cloud Configuration Audit, Architecture Review. The work involves Test Case Creation, Penetration Testing, Source code reviews, Report Creation & presentation to stakeholders along with operation and construction of tools to assist in these tasks. Well versed with OWASP Top Ten and WASC Threat Classifications Expertise in Vulnerability Assessment and Penetration Testing of Web Applications BusinessLogic based application testing Penetration testing of Mobile applications and websites. Exploitation of the issues found and presenting the impact occurred Source Code Reviews Well versed in Java Secure Code Review Well versed in OWASP Code Review concepts & identifiers Familiar with popular tools: Application Proxy: Burp suite, Paros, OWASP ZAP, WireShark, Vulnerability Scanners: IBM AppScan, HP WebInspect, Nessus, NTO Spider. Exploit Toolkits: Metasploit, Exploit DB etc Understanding of the nature and sources of security vulnerabilities, how to identify and exploit Sound Knowledge of TCP/IP protocol Stack, HTTP protocol, encoding standards, encryption technologies and development frameworks. Skills Mandatory: Application Security Testing/Penetration Testing (Web-based, Thick client, web services, Mobile) Network Security Testing/Penetration Testing (Network, OS, Databases etc) Static Code Analysis/ Secure Code Review

skills will be required- Extensive experience with Information security and risk management- Experience with IT (security) Architecture, design and engineering- Practical understanding of, and experience with, Shells IT infrastructure, architecture and technology solutions.- Sound knowledge of IT Governance Risk & Control frameworks, specifically ISO27001, COBIT and risk methodologies (IRAM)- Proven capability in managing IT security infrastructure risks.Knowledge of external Legal, Regulatory and industry best industry requirements, particularly Export Controls, PCI DSS and Data Privacy regulations

Security Risk & Control Consultant (SRCC) The Security & Compliance (S&C) Competency Centre (CC) Lead is responsible for supporting the following:EducationGraduate degree plus recognized information security certifications like CISSP, CCSP, SSCP, CRISC, GSEC, etc. are good to haveProject Review and Technical Advice- Review all new high-risk projects; new technical designs; for Information risks and advise on suitable controls and mitigations at early stages of the program.- Lead the S&C Analyst for specific technology and advice on the Information security for their projects.- Offer advice to Shell and suppliers to assist in resolving questions and issues around how to manage risk- Provide Subject Matter Expertise for projects and business stakeholders, in combination with the Improvement Program.- Work with the architecture community to review new technology and architecture innovations.Risk Management and Mitigation- Assess and classify all potential business and infrastructure information risks.- Execute, with suppliers, risk analyses on IT application/services.- Develop and socialize our overall risk profile and action plans to mitigate risks- Review and recommend approval project charters.- Facilitate smooth conduct of Risk Assessment (including Legal & Regulatory) on Applications, Network& Systems- Perform end to end Security Assessment on vendor offerings New/Leveraging existing (SAAS / PAAS/IAAS) services including integration with Shell environment.- Translate Technical, legal and Regulatory Compliance obligations into a cohesive collection of Security Controls and provides the respective stakeholders with the IRM requirements and its implementation methodologies.- Support in development of tooling to support IRM processes and ensuring this is fit for purpose.- Actively participate in S&C team and community meetings, representing S&C and Business interests in other CC forums.- Support during Internal /External Audit

Good understanding of, and experience with Information Risk Management, IT Security and Compliance and Security Controls and AuditAdvanced understanding of internal and external IT security standards, SOX, PCI, SOC2/1, ISO27001 standards and relevant legal compliance aspects.Robust understanding of, and solid experiences with the impact of Security on application development and operations as well as the IT Infrastructure.Ability to promote high performance teams, working with inclusiveness and cultural diversity, across organizational boundaries.Good understanding of cloud security requirements and third-party control assurance.Ability to interface with different groups (Third parties, Business and IT) internal and external to IT (security) and to network globally across Group businesses, as well as with external groups.Technical knowledge & relevant experience in security domains /technologies related to:Infrastructure/Network securityIdentity and Access ManagementBusiness Impact AssessmentApplication securityData Leakage PreventionEnd-Point ProtectionWeb filtering technologies, Proxies and firewalls.Vulnerability Assessment / Penetration TestingKnowledge of Data Security Standards, Privacy PrinciplesDriving Platform / Application security and complianceAbility to foresee and identify mitigation strategies for RisksCandidate must also:Display excellent communicating and influencing skillsDisplay analytical and problem-solving skillsBe pro-active and self-motivatedDisplay strong interpersonal and negotiating skills with all levels of staff.Display Ability and eagerness to quickly learn new technologies.QualificationsA qualification in CISSP, CISA, CRISC or CISM

Job Responsibilities:1. Prospecting for potential new clients in Enterprise Accounts in respective regions.2. Expected to build strong relationships with Decision Makers/ CXO/ Sr. Mgmt. of Enterprise Accounts.3. Making calls/visiting customers within your market or geographic area to ensure a robust funnel for opportunities for OSIGLOBAL ITD Lines of Businesses.4. Identify and prospect potential clients in Enterprise Accounts and manage the relationship in order to generate business for OSIGLOBAL ITD.5. Identify Key decision makers / IT Consultants within the Enterprise Accounts /organisations and build a strong relationship in order to get first right of refusal for OSIGLOBAL ITD Line of Business Opportunity.6. Ensuring to meet an Individual Quarterly and Annual Sales targets for each line of business of OSIGLOBAL ITD from Enterprise Accounts.7. Building stronger relationships with Sr. management /CXO of Enterprise Accounts/clients.Desired Skills:1. Must have been working in the respective regions since last 3-4 years at least handling Top / Larger Enterprise Accounts.2. Must have selling experience in IT /Information Security Sales/ Cybersecurity Sales/ Networking Products/ Network Security Products/Managed Services/Remote Infra Services in Enterprise Vertical in Top/Large Accounts in the respective regions.3. Must have strong, good working relationship with Decision Makers/Sr. Mgt./ CXOs/IT Consultants in Top Enterprise Accounts in respective regions.4. Excellent communication, listening skills & ability to present Solutions to Senior Management /CXOs of Enterprise Accounts customers.

Knowledge & Skills required: Business Development Key Account Management Client Relationship Management Cybersecurity / InfoSec / PCI / Forensics background IT/Banking/ ecommerce /Govt. Sales areas Customer ProfilingJob Description*At least 6 years of relevant experience in Sales and/or business development in cyber/ Information security services*Develop new sales leads and prospects and achieve assigned sales targets*Understand and appreciate market trends, competitive landscape and industry developments in the security sector*Responsible for staying well-informed about product roadmap as well as understanding the scenarios, features and functions within each of the products and how these are applied to address business and technical problems. This includes interacting with Product Management on an on-going basis to stay current.*Maintain contact with all clients in the market area to ensure high levels of client satisfaction.*Define strategy to achieve targets and to follow the set strategy punctually.*Responsible for staying current on competitive analyses and understanding differentiation between the company and its competitors.Requirements: Proven Business Development Manager working on Targets Proven track record in sales, business development and winning new business Experience in selling PCI DSS, SOC (Security Operations), penetration testing, incident response services, Threat assessments etc. is desirable. Good understanding of Information/ Cyber security marketplace and solutions Account planning and execution and ability to network with all levels in an organization Ability to understand customer Cyber/ Information security requirements and offer appropriate solutions. Strong client relationship building/ interpersonal skills and communication skills Should have experience in doing presentations, demonstrations, conducting evaluations, preparing proposals, responding to RFPs, Tenders, etc.