Cyber Security Analyst -NIST Control
Responsibilities
Major Activities
· Ability to identify, propose, design and run the operational and security Risk Controls
· Identify data model (attribute/fields) from security logs to perform audit and checks.
· Device efficient process to enforce security controls
· Effective communication with the stakeholders project team, security SPOCs and other cross functional teams.
· Ability to assess the maturity level of existing new controls and improve control effectiveness by implementing necessary action items.
· Evaluate the Security and Risk Assessment for the infrastructure or application
· Recognizes problems by identifying abnormalities, reporting discrepancies
· Good reporting / communication skills and ability to convey technical or complex security topics to management is simple and effective manner. Experience on designing reports using tools like Power BI or Tableau or Pandas/Xlwings/Plotydash is added advantage.
o Ability to perform the Internal Audits for different teams / departments
Profile required
Technical skills:
- Cybersecurity:
- Risk analysis: Intermediate to Expert,
- Security audit and framework (ISO 27001, NIST, PCI-DSS): Intermediate to Expert
- Pentest knowledge (OWASP, methodology, hacking): Intermediate to Expert
- System and OS administration & hardening
- Application Security: Intermediate to Expert
- Linux/windows administration: Intermediate
- Linux/windows security and hardening: Intermediate to Expert
- Vulnerability management standards: Standard
Other skillset:
- Excellent understanding of cybersecurity operational activities.
- Excellent written and verbal communication.
- Strong academic background with technology skills
- Strong delivery background for both onshore and offshore activities
- Experience working with global client is a must.
- Practical understanding of agile or agile @ scale functions and its practical implementations.
- Strong process & change management capabilities.
Why join us
“We are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status
Business insight
At Société Générale, we are convinced that people are drivers of change, and that the world of
tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious.
Whether you’re joining us for a period of months, years or your entire career, together we can have
a positive impact on the future. Creating, daring, innovating and taking action are part of our DNA.
If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a
daily basis and develop or strengthen your expertise, you will feel right at home with us!
Still hesitating?
You should know that our employees can dedicate several days per year to solidarity actions during
their working hours, including sponsoring people struggling with their orientation or professional
integration, participating in the financial education of young apprentices and sharing their skills with
charities. There are many ways to get involved.
We are an equal opportunities employer and we are proud to make diversity a strength for our company. Societe Generale is committed to recognizing and promoting all talents, regardless of their beliefs, age, disability, parental status, ethnic origin, nationality, gender identity, sexual orientation, membership of a political, religious, trade union or minority organisation, or any other characteristic that could be subject to discrimination.