GRC Analyst

Role Description UST is looking for Information Security Analyst with below requirements,

Operational Support

• Coordinate with technology factory teams for assessment as per BAU process
• Work with Technology Asset Owners (TAOs) to assess and implement relevant BAU process for Control Factory Candidates
• Perform Assessments to determine security risks/ non-compliance as per the SOP manuals
• Work with the team concerned and follow through remediation
• Tracking and progress reporting
• Perform periodic assessments to ensure compliance proactively

Skill Set Requirements Role: Control Factory - Information Security Analyst

Skills & Background

• Minimum 5-10 years of relevant industry experience in any technology risk management (TRM), IT audit and/or cyber/information security functions
• Ability to understand and operate documented process for IT compliance, audit and regulatory requests
• Knowhow and understanding in one or more areas of technology risk management principles, internal control concepts, cyber/information security controls, and industry frameworks
• Follow documented process to maintain BAU operations
• Communication Results to stakeholders
• Analyze Deviations and prepare remediation plan along the documented procedures
• Be able to understand controls, develop inventory, assess applications against controls
• Be able to work with stakeholders in remediation activities
• Ability to manage JIRA workflow tickets for BAU process
• Prepare & maintain knowledge base in Confluence/Collaborate
• Identify areas of automation/innovation and efficiencies to enhance the BAU operation and stakeholder experience
• Functional knowledge of operating systems (Windows/Unix), databases, networks and components like system IDs, system resources, firewalls, LDAP, AD, Cloud
• Functional knowledge of applications (authentication, authorization, interfaces, APIs), logging and monitoring
• Functional knowledge of application design and architecture
• Functional knowledge of application criticality, availability and data classification
• Able to learn new skills with training and self-study
• Any relevant experience in Project Management is desirable.

Tools

• JIRA, Confluence, ServiceNow and/ or Archer.
• MS Office (Word/Excel/Visio), PDF and PowerPoint.

Education and Certifications

• Degree or diploma in IT or technology stream
• Any industry recognized IT certifications (Microsoft, Cloud, IT Security etc)

Skills information security,cybersecurity,jira,it audit,