Total 156 Director/C-Level security analyst job vacancies in Australia

Loews Regency New York Hotel has a legacy of luxury - expertly orchestrated and masterfully performed. Located in midtown Manhattan, the property seamlessly blends its iconic Art Deco design with modern sensibilities, craftily merging form and function to compliment 50 years of service expertise. Welcome to our Park Avenue Allure.

Thales Belgium SA, Belgium competence center of Thales, is a company located on 2 sites, one in Tubize (near Brussels) and the other one in Herstal (near Liège). Thales Belgium, which employs more than 280 collaborators, is specialized in the design, development and supply of critical information systems for customers in the sectors of Defense, Security (including Cyber) and Aerospace.

The CISO is responsible for all aspects of information security and cyber security across all of IT including support developing, deploying and maintaining a robust security strategy with solid security policies; protocols and procedures across enterprise security architecture, security operations center, datacenter security, and network security including cloud and applications security with appropriate security measures and initiatives. This role also advises senior leaders and other stakeholders on the further development, implementation and management of a countrywide IT security infrastructure that contains appropriate control objectives for system integrity, availability, reliability, resilience, confidentiality and assurance to company, industry and international standards.
CISO Community: engage with and contribute to the group CISO community ; NG role: PO/SO for local security squad

•      Identifying and prioritizing cybersecurity risks and reporting them to local CIO and EUROPE CISO.

•      Ensure strategic alignment of the region approach to IS/IT Security is compliant with legal and regulatory requirements, Group standards and aligned with business objectives.

•      Ensure security program & plans are in place and actions are implemented to manage the risk of adverse impacts from any external or internal attack on the region IT/IS are reduced to an acceptable level.

•      Ensure appropriate budget and resources are allocated to support the security program at region level

•      Be a member of the Group Information System Security Community – sets and approves IS security policy decisions and exceptions.

•      Ensure security incidents are coordinated and managed with the Central Security body through EUROPE CISO

•      Coordinate regionally under the supervision of the Cert Incident Response Activities.

•      Gain acceptance of proposed security solutions by the various security accrediting bodies within Group CISO

•      Respect Group IS/IT standards and strategy.

•      Review strategies, operational changes and projects to ensure appropriate security controls are applied.

•      Review proposed enterprise architecture strategies and designs to ensure that new risks are not introduced into company, and to suggest changes that may increase functionality and help reduce existing risks.

•      Maintain /Coordinate an understanding of current and emerging security threats that may affect the company now or in the future.

•      Undertake / Coordinate forensic investigations and analysis as required on company computer assets in support of HR led investigations.

•      Liaise with Legal in regards to export control requirements in systems and manage any e-discovery requirements that the company are required to undertake.

•      Undertake governance responsibilities for technology based Defense regulations and policies and report the company state of compliance to the Governmental Boards in charge.

•      Provide regular updates to the CIO and EUROPE CISO regarding achievements, issues and goals

•      Review and ensure the follow up of remediation plans with EUROPE CISO

•      Acts as the first point of contact for internal and external audits.

• Bachelors (Masters preferred) Information Technology and/or Information Security (Degree or equivalent).
• 5+ years of leadership experience overseeing security initiatives in a medium to large enterprise.
• Obtained one or more of the following certifications: Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Global Information Assurance Certification (GIAC), ISO27001 Lead Implementer; Project Management Professional (PMP/Prince2); or other related certifications.
• Obtained Cosmic Top Secret (CTS) Security Clearance is a huge asset.
• Demonstrable experience of emergency preparedness, critical incident management, business continuity and disaster recovery.
• Experienced with medium to large IT Infrastructure and/or IT security projects, e.g. firewall deployment, NAC implementation, web proxy upgrade etc.
• Prior experience with information security framework, secure network architecture and design, cloud computing, and secure application architecture/design.
• Proven experience of leading a multidisciplinary team.
• Strong working knowledge of information security technologies, markets and vendors including firewall, intrusion detection, assessment and monitoring tools, encryption, certificate authority, and cloud networks.
• Experienced in developing policies and procedures for identity and access management, security programs, security procedures, security standards, requirement definition, and project management plans.
• Adept in creating business cases and user cases including the ramification of various system, network and application security decisions and recommendations.
• Experience in managing IT responses to internal and external audit campaigns
• Articulate with strong verbal and written communication skills including technical and non-technical audiences.
• Business proficient  in English and French

•              Experienced in working within a centralized/decentralized matrix business environment.

•              Knowledge of SEI’s CMMI model for secure software development.

•              Broad experience of conducting risk assessments including presenting recommendations to c-suite

At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now!

Interested?
Apply now! Click on the button below to upload your profile and show your interest.

Diversity Statement
We actively support a working pattern that suits your lifestyle and helps you reach your ambitions. That means that equal opportunities, inclusion and an informal culture are integral to our success. It also means that your well-being and happiness matter to us! That’s why we offer you the flexibility to do what’s important to you; whether that’s part time hours, job sharing, remote working, or the ability to flex your start and finish times.

As the Chief Information Security Officer (CISO) at Endeavour, you will play a pivotal role in developing and implementing our organisation-wide information security strategy. You will lead initiatives to assess and mitigate cybersecurity risks, establish robust governance frameworks, and ensure compliance with regulatory standards. Your responsibilities will include overseeing incident response, conducting security awareness training, and managing vendor relationships. 

As we continue our journey towards greater operational maturity, we are placing even more emphasis on ways of working and collaboration particularly across our cyber and broader technology teams. To enhance and sustain our success our CISO will need to communicate security-related concerns in terms of business impact and develop integrated plans to drive improvements in our security posture.

Key Responsibilities:

• Develop and lead the implementation of an organisation-wide information security strategy aligned with business goals.

• Assess and prioritise cybersecurity risks, ensuring compliance with policies and regulations.

• Establish and oversee robust governance frameworks and incident response plans.

• Conduct security awareness training and foster a culture of security consciousness.

• Manage security technologies and partnerships to safeguard information assets.

• Assess and manage security risks associated with third-party vendors and partners.

• Collaborate with internal and external stakeholders to address security concerns and provide regular updates to executive leadership.

• Lead and inspire the Cyber Security team, actively supporting talent development and growth.

Job Overview

The successful candidate will play an integral role in developing the information security Risk Management framework for IQVIA and will manage risks identified through a variety of IT and operational audits. You will be responsible for managing the development of team members and will engage with senior business stakeholders to create targeted risk assurance programs based on identified, assessed and emerging risks. You will have strong understanding of Risk and Controls, and you will have extensive line management experience, managing the workload and development of team members. As the Director for Information Security Risk Management, you’ll be responsible for (but not limited to) the following:

• Leading risk-related projects
• Maintaining ongoing testing and development of Information Security Risk Management framework, liaising with senior stakeholders and providing regular updates to stakeholders.
• Producing risk reports when required
• Working closely with other senior leaders within the team regarding training and guidance to support the business.
• Working with Business Units and stakeholders to ensure adequate, cost effective and timely protection/risk transfer for business activities.
• Creating a Supplier Risk Management Framework

Key Responsibilities:

• Own the development and integration of the Information Security Risk Management Framework, Risk Appetite Statements, and Risk Policies and Procedures across the organization.
• Work closely with business and senior management to identify and manage risks aligned with the organization’s strategy and risk appetite.
• Provides strategic and tactical guidance to business decision-makers.
• Contribute to a strong governance structure and risk management across all business entities.
• Assess the impact of emerging risks and regulations, providing input and support for pragmatic solutions.
• Establish a comprehensive risk reporting system and process.
• Assist to remediate risks identified through established processes and procedures.
• Provides recommendations for remediation based on the reviews and risk assessments performed.
• Assist key business stakeholders in identifying and responding effectively to risk.
• Define key risk and performance indicators (KRIs/KPIs) for evaluating risk management performance.
• Integrate business continuity and crisis management into the organization's risk management strategies.
• Support the configuration of the TPRM & Risk Management solution for consistency with local processes.
• Assist in reviewing third parties, including due diligence reviews.
• Perform review of vendor engagements, understanding the functions of effective third-party risk.

Qualifications:

• Bachelor's Degree Computer Science, a related field, or equivalent experience required.
• 10 years of experience within the information security domain managing Risk frameworks.
• Deep understanding and demonstrated experience of end-to-end risk management lifecycle, including key components and their relationships with internal and external stakeholders.
• Experience in non-financial/operational risk - developing and implementing risk frameworks, policies, and procedures.
• Demonstrated experience leading risk management workshops, obtaining and synthesizing inputs from technical and non-technical stakeholders throughout the enterprise.
• Experience in conducting Third Party reviews is advantageous.
• Experience operating as a part of a GRC program in alignment with common information technology management frameworks such as NIST, ITIL, ISO 27001 etc.
• Security-related qualifications such as CISM or CISSP , CRISC are a plus.

IQVIA is a leading global provider of advanced analytics, technology solutions and clinical research services to the life sciences industry. We believe in pushing the boundaries of human science and data science to make the biggest impact possible – to help our customers create a healthier world. Learn more at https://jobs.iqvia.com

Job Family:

Travel Required:

Clearance Required:

What You Will Do:

• Drive business development in the sector, including:
  • building and executing the sector strategy
  • evangelizing ServiceNow internally across industry segments to promote awareness of use cases and client opportunities, and
  • supporting pre-sales activities inclusive of leading sales calls and proposal development and client presentations
• Work as part of the practice leadership team to develop Sales strategies for growing the practice. 
• Lead and ensuring the successful delivery of ServiceNow implementation engagements.
• Coordinate recruiting efforts to build a team and support growth in sales and high quality, repeatable engagements. 
• Be accountable for ensuring the overall execution quality of business and technology consulting across all ServiceNow engagements in the sector, including oversight and governance.
• Mentor more junior team members in business analysis, project management, and ServiceNow best practices 
• Drive revenue of all ServiceNow offerings across businesses in the segment, with revenue management expectations of >$5 million in the first year
• Identify opportunities for growth and greenspace for ServiceNow offerings (products, accelerators)
• Build and develop relationship / partnership with segment teams, aligning on sales pursuits, resource capacity and capabilities, and awareness across the industries.
• Build and develop relationships with ServiceNow for commercial segments and own and manage joint sales pursuits.
• Develop and author/co-author thought leadership content and marketing material.
• Maintain awareness of industry best practices and business levers for cloud offerings keeps pace with ServiceNow product evolution within the sector.

What You Will Need:

• Minimum of 10 years of progressive experience in project management, business analysis, and technology implementation in full life-cycle ServiceNow engagements  
• A minimum of 5 years of experience with ServiceNow is required including leading large ServiceNow engagements.
• Travel Requirements: Willingness to travel up to 25%
• Minimum of 10 years’ experience in a large consulting environment, preferably with a Global or Elite ServiceNow SI partner
• Deep technical understanding of ServiceNow - Expertise with multiple Modules
• Active ServiceNow certifications or ability to achieve relevant certifications upon hire.
• Expert business development skills as well as managing relationships with both clients and internal stakeholders.
• Business operations and/or strategic planning experience
• Demonstrable skills of managing multiple clients
• Exceptional communication and presentation skills   
• Bachelor’s degree required
• US Citizenship Required

What Would Be Nice To Have:

• Active Secret Clearance
• ServiceNow CMA preferred
• Prior experience building a ServiceNow practice or team preferred.
• Customer oriented and great at building client relationships
• Preferred candidate local to the Washington DC area or willing to relocate

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

• Medical, Rx, Dental & Vision Insurance

• Personal and Family Sick Time & Company Paid Holidays

• Parental Leave

• 401(k) Retirement Plan

• Group Term Life and Travel Assistance

• Voluntary Life and AD&D Insurance

• Health Savings Account, Health Care & Dependent Care Flexible Spending Accounts

• Transit and Parking Commuter Benefits

• Short-Term & Long-Term Disability

• Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities

• Employee Referral Program

• Corporate Sponsored Events & Community Outreach

• Care.com annual membership

• Employee Assistance Program

• Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance and ID theft protection, etc.)

• Position may be eligible for a discretionary variable incentive bonus

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Make an Impact by

• Seeking a highly skilled and motivated Cyber Security Testing Lead who is skilled in application and infrastructure penetration testing, vulnerability assessment and source code review to guide and review the work of external and cross function team security testers. Need to be responsible for assessing and enhancing the security posture of the organisation’s critical applications and infrastructure through comprehensive testing, vulnerability assessment, and penetration testing techniques. Expertise will play a crucial role in identifying security vulnerabilities and recommending risk mitigation strategies to different senior stakeholders.
• Review and tailor the scope of external penetration testing, along with Domain security champions.
• Review the results of external penetration tests and partner with Domains to contextualise findings and prioritise remediation
• Conduct application and infrastructure penetration testing, vulnerability assessment and source code review in line with Singtel’s standards, through leveraging own team, cross-functional teams or external testers.
• Perform targeted application security assessments and penetration tests for various applications such as mobile, and web services as needed.
• Collaborate with cross-functional teams to provide guidance on Singtel’s standards, security best practices and recommend remediation strategies.
• Work with third party penetration testers to coordinate annual penetration tests for the organisation.
• Collaborate with cross-functional team’s penetration testers and provide guidance on scoping, rules of engagement, testing methodology and reporting.
• Develop and maintain detailed documentation of security assessments, including findings, methodologies, and recommendations.
• Utilize both manual testing and automated application vulnerability scanning/testing tools for assessments.
• Retest security vulnerabilities and update reports with retesting results.
• Stay updated with the latest security trends, vulnerabilities, and attack techniques to enhance the effectiveness of security testing methodologies.

Skills for Success

• Bachelor’s degree in computer science, Information Security, or a related field.
• Solid experience in application security testing, vulnerability assessment, source code review and penetration testing.
• Proficiency in performing application security testing using manual techniques, as well as utilizing runtime vulnerability testing tools and/or code review tools.
• Strong understanding of OWASP Top 10, CWE/SANS Top 25, and other common vulnerability frameworks.
• Attained OSCP or CREST
• Familiarity with various security tools and products like Fortify, AppScan, Webinspect, Burp Suite, Nessus, etc.
• Strong understanding of APIs, HTTP protocol, and Cloud technologies
• Familiarity with secure coding practices and common programming languages
• Strong written and verbal communication skills, including the ability to effectively communicate complex technical concepts to both technical and non-technical stakeholder.

Make an Impact by

• Provide leadership and strategy for cybersecurity monitoring and incident response operations supporting Group IT and Singtel.
• Take leadership role to detect, manage and respond to cybersecurity incidents and provide updates to internal stakeholders and management. Work closely with Group Risk Management (GRM) to support crisis management processes and exercises.
• Manage a highly specialised team of security analysts, incident managers and incident responders to effectively monitor, defend and response to cyber threats and events. Develop critical in-house talent and capabilities, while leveraging on 3rd party services. Aggressively drive automation using AI and other technology.
• Build and maintain an effective threat intel capability and working collaboratively with other internal SOCs and partners to coordinate defensive tactics and playbooks against cyber threats.
• Continuously identify and enhance 24x7 operations, incident and crisis management processes, automation, and capabilities to progressively strengthen the security posture of Singtel and its group of companies.
• Experience in Security Ops and monitoring of Cloud set up
• Partner with Cyber Threat Intel team and perform Hunting as per event, or per time-driven calendar.
• Lead the automation of SOC and IR runbooks, moving the SOC team up the value chain.

Skills for Success

• Bachelor Degree in Computer Science, Computer Engineering, Electrical Engineering or other relevant field of study
• Professional security management certifications such as Certified Information Systems Security professional (CISSP), Certified Information Security Manager (CISM), specialised SANS certifications, or other similar credentials, is required.
• Minimum 10 years of experience as in IT or security roles.
• Minimum 5 years of practical experience managing security operations, SOCs or equivalent security programmes.
• Experience working with Internal Audit, Governance and Compliance teams.
• Expert or advance level competence in the following :Cyber Incident Management
  Partnership Management
  Network Security
  Platform Security
  Security Programme Management
  Stakeholder Management
  Threat Analysis and Defence
  Threat Detection and Response
  Security Monitoring Tools
• Advanced understanding in the following areas:Data Security
  Physical Security
  Regulatory requirements
  Data Loss Prevention strategies
  
• Expert competence in the following:Communication
  Leadership
  Decision Making
  Developing People
  Resource Management
  
• Have exposure to other compliance audits such as PCI, PDPA, GDPR, CCoP mostly related to security part.

Job Overview
Serves as the Data Protection Officer and Data Security Officer overseeing IQVIA Research and Development Services data processing and protection.

Essential Functions
• Assess and define the organization's current and future information security and personal information processing requirements.
• Analyze information to identify capability gaps in the context of emerging threats, regulatory considerations, and changes in industry standards,
• Develop strategy to evaluate, design, or plan the implementation of new or updated information security controls and analyze impact on existing environment.
• Lead, manage, or monitor information security projects, provide expert guidance on information security matters for other IT projects.
• Assess effectiveness of data protection and information security programs within primary area of responsibility.
• Carry out leadership responsibilities in accordance with the organization's policies, procedures, and applicable laws.
• Encourage new ideas for team to foster improvements through innovation.
• Empower staff to be accountable and responsible for their own actions and decisions.
• Promote and exhibit collaboration and positive teamwork.

Qualifications
• Bachelor's Degree Computer Science, a related field, or equivalent experience
Req
• Minimum 5 years leading information security technology, data privacy, project management, and/or strategy. Pref
• Certified Information Processing Professional (CIPP) Or
• CISSP - Cert Information Systems Security Prof Req Or
• Certified Information Security Manager Req Or
• Certified in Risk and Information Security Controls Req

IQVIA is a leading global provider of advanced analytics, technology solutions and clinical research services to the life sciences industry. We believe in pushing the boundaries of human science and data science to make the biggest impact possible – to help our customers create a healthier world. Learn more at https://jobs.iqvia.com

Our urban oasis, situated at the corner of Hollywood and Highland, is your perfect base for moving and shaking, tinseltown-style. Loews Hollywood Hotel offers you movie-star magic and modern upscale amenities. Welcome to Style and Stature in the Hollywood Hills.

Key Role:

Process and analyze cyber threat intelligence information and compile standard and ad-hoc reports, as needed. Apply advanced understanding of techniques that detect, neutralize, and exploit hazards that permit the unauthorized access to or removal of information. Develop innovative solutions to complex problems for technical surveillance. Work without considerable direction. Mentor and supervise team members.

Basic Qualifications:

• 11+ years of experience with Counterintelligence (CI)
• 7+ years of experience with federal Technical Surveillance Countermeasure (TSCM)
• 5+ years of experience as a TSCM Team Chief
• Experience with telephone security such as Telephone Security Group (TSG) requirements
• TS/SCI clearance
• Bachelor’s degree
• Interagency Training Center (ITC) TSCM Certification
• TSCM Fundamentals and TSCM Cyber certifications
• A +, Network +, and Sec + certifications
• Graduate of a federal or DoD CI training academy

Additional Qualifications:

• Master’s degree in Computer Science or Engineering

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Create Your Career:

Grow With Us

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.

A Place Where You Belong

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time.

Support Your Well-Being

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.

Your Candidate Journey

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

Accor is a dynamic and innovative hospitality company committed to excellence for our customers, hotels owners and our employees. To succeed in this mission, we are seeking a highly skilled and experienced IT Security Infrastructure Director to join our cyber security team and lead our efforts in maintaining a secure and resilient IT environment.​

Strategic Planning:​

• ​Develop and implement the overall IT security infrastructure strategy aligned with organizational objectives.​
• Provide expertise in designing, implementing, and maintaining security measures for the organization's IT infrastructure. ​

Leadership:​

• Lead and mentor a team of IT security professionals, fostering a culture of continuous learning and development.​

• Collaborate with cross-functional teams to integrate security measures into various IT projects. ​​

Risk Management:​

• Identify, assess, and prioritize security risks, and develop strategies to mitigate potential threats. ​

• Implement and manage a robust incident response and recovery plan.​

Infrastructure Security: ​

• Oversee the design, deployment, and maintenance of secure network architecture.​
• Implement and manage security controls for servers, databases, and other critical IT assets (on premise and in the cloud). ​

Compliance:​

• Ensure compliance with industry regulations and standards related to IT security. ​
• Collaborate with internal and external auditors to conduct regular security assessments. ​

As a team lead, you will support CISO with engagement and supporting Com Care Sector on Cyber Security initiatives, to provide outreach to Community Care Sector on Security Best Practices.

• Drive the HIB Compliance program and outreach to the Sector.
• Support CISO in managing Sector Cyber Security team.
• Support the Sector & Digitization team engagement with Sector on Cyber Security
• Drive the Cyber Essential+ certification & Trust Mark certification program

Job Requirements:

• Degree in Information technology with at least 15 years of working experience in Cyber Security or IT
• Professional certification in CISM, CRISM, CGEIT is good to have
• Relevant working experience in both vendor and end user environment
• Proven track record in positions to provide consultancy or advisory to internal or external customers
• Cyber Security Governance and Assurance Knowledge
• Good stakeholder management, IT/Cyber Risk Management
• Good understanding of Cyber Security best practices and standards (NIST, ISO27000, Cyber Kill Chain, MITRE)

Job Purpose

To evaluate, guide and advise Front Office teams and / or Management on credit matters. Maintain overall credit quality of Corporate Banking Asia Pacific portfolio.

Job Responsibilities

• Preparation and review of credit applications (such as renewals, change of conditions and miscellaneous applications), financial projections and spreadsheet, obligor grading and Self-Assessment.
• Handling of Cross Booking Transactions and Head Office Booking Transactions.
• Evaluate and structure credit facilities to mitigate risks, provide guidance to Front Office teams in compliance with internal policies and regulatory requirements.
• Support Front Office teams in Problem Accounts Management, address queries and comments from auditors and regulators and implementation of audit recommendations.
• Oversee credit portfolio quality of Corporate Banking Asia Pacific through credit surveillance, covenant monitoring and due date management.
• Relevant internal reporting duties.
• Any other duties as assigned by Management or Group Head as required.

Job Requirements

• Bachelor’s Degree in Banking, Finance, Accountancy, or related discipline.
• Minimum 15 years of relevant work experience in credit analysis in the banking and finance industry.
• A team player who is detailed-oriented and has good analytical skill.
• Possess leadership qualities, excellent communication, presentation and interpersonal skills.
• Ability to work under pressure and tight deadlines.

​​​​​​​

About the Role:

When it comes to Cybersecurity, do you believe “people” is the most important part of “people, process and technology?”  Do you dream of ways to measure things? Security controls? Efficacy?  Do you have strong opinions about how cybersecurity should be managed? Yet, at the same time, are you open to people disagreeing with you?  Are you a great communicator and enjoy explaining complex technical concepts to fifth graders or their equivalents? Have you been on stage or on a podcast?

If you were asked to list your favourite three leadership/management influences, could you easily rattle them off?

Do you have experience besides Cybersecurity? Have you been a developer in a past life? A systems administrator? An auditor? 

If you answered yes to most of the above questions, then this might be your role! 

We are seeking a highly motivated, strategic thinker and tactical cybersecurity wizard to join our people-first cybersecurity leadership team as the Deputy Chief Information Security Officer.

This role will be based in Chennai, India, and will work with global resources and teams located in Chennai, India, EU, and the U.S. 

Job Summary:
 

As the Deputy Chief Information Security Officer (DCISO) you will play a critical role in leading and strengthening our cybersecurity program. You will work closely with the CISO and executive leadership to develop and execute strategies that safeguard our information assets, maintain compliance, and ensure the security of our SaaS products and customer data. This role prioritizes leadership and team building, focusing on guiding a high-performing security team.

Responsibilities:

• Leadership and Team Building:
  • Provide visionary leadership to the security team, fostering a culture of collaboration, innovation, and excellence.
  • Develop and mentor a diverse and highly skilled team of security professionals, nurturing their growth and career development.
  • Collaborate with cross-functional teams to build a security-conscious organizational culture and promote security awareness.
• Strategy and Governance:
  • Assist the CISO in developing and implementing the company's information security strategy and policies.
  • Contribute to the creation and maintenance of an effective security governance framework.
  • Ensure alignment of security initiatives with business objectives and industry best practices.
• Risk Management:
  • Identify and assess security risks, vulnerabilities, and emerging threats to the organization.
  • Own the development and implementation of risk mitigation strategies and incident response plans.
  • Regularly oversee the review of security controls and processes to maintain a strong security posture.
• Compliance and Regulatory Oversight:
  • Monitor and ensure compliance with relevant data protection laws and industry regulations.
  • Oversee the preparation and submission of compliance reports and certifications.
  • Collaborate with legal and regulatory teams to address compliance issues.
• Incident Response and Recovery:
  • Help lead incident response efforts in the event of security breaches or incidents, coordinating with internal and external stakeholders.
  • Drive the development and maintenance of an effective incident response plan to minimize business impact.
• Vendor and Third-Party Risk Management:
  • Govern the evaluation and management of the security posture of third-party vendors and partners.
  • Establish and maintain strong vendor security relationships and agreements.
• Security Awareness and Training:
  • Help promote security awareness and training programs across the organization.
  • Develop and deliver security training materials and resources to educate employees on security best practices.
• Budget Oversight: 
  • Manage and oversee the cybersecurity budget, ensuring efficient allocation of resources and cost-effective security solutions.
• Product Security
  • Support penetration testing teams exploiting web and mobile application security flaws such as SSRF, SQLi, RCE, and DNS binding attacks.
  • Guide the implementation of AuthN/AuthZ mechanisms and the building of robust RBAC controls like SAML, OAuth, OpenID, etc. 
  • Assist product security teams in building resilient, highly available systems, identifying security vulnerabilities in our products and addressing them, and reducing friction in the SDLC pipelines while improving security controls.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field; a master's degree is a plus. Must have at least one of these relevant certifications (e.g., CISSP, CISM, CISA).
• Proven experience (8+ years) in cybersecurity, with at least 3 years in a leadership or strategic role managing more than one cybersecurity function (e.g. SOC & GRC, Application Security & Incident Response) either concurrently or consecutively. 12+ years of overall experience.
• Strong understanding of cybersecurity principles, technologies, and best practices.
• Excellent project management and organizational skills, with a track record of successfully managing complex initiatives.
• Exceptional, master's degree level of written communication skills. Above average, dare we ask for remarkable interpersonal skills, with the ability to interact effectively with executives, technical teams, and external partners.
• Advanced stage presence: ability to speak and present in front of large groups, ability to write and communicate to U.S. and India audiences.
• Strategic thinker with the ability to analyze and solve complex problems.
• Knowledge of regulatory requirements and compliance standards related to cybersecurity.

Control Risks is currently looking for an experienced Security Director to be embedded with our client, a large multinational company, based in Mindanao, Philippines. This role will play a key part in the ongoing development of the client’s holistic security programme.

The Security Director will lead the security function and assume responsibility for the delivery of the security programme specific to the client's operations. The Security Director is tasked with the development of the security plan, which will assess threats, risks and resources. They will also coordinate security and incident training for local security officers. The Security Director will work closely with leaders from across the business, including Supply Chain, HR, Legal, IT, and Compliance areas. Effective engagement with third party security providers and government agencies is also required.

This position will be hired as an initial 1-year contract, with scope for further extension.

Responsibilities will include:

• Work with leadership team to analyse security threats and risks to the client's people and business. Implement security mitigation plans and establish relevant countermeasures. Escalate higher-level risks as required.
• Work with relevant teams to communicate security advice to travellers operating in high-risk locations.
• Work with business leaders to develop Incident Management plans. Support implementation of incident management framework.
• Oversee and ensure proper performance of the third party security guard companies engaged by the client.
• Create/update the security framework and ensure it is applied effectively.
• Conduct security risk assessments to validate effectiveness’ of security controls (people, processes and technology).
• Lead the implementation of effective and cost-efficient holistic security solutions.
• Conduct a physical security Risk Assessment for new sites or post major refurbishment, use or occupancy change, and major change to threat assessment.
• Understand and apply the full range of corporate investigative capabilities, whilst ensuring their lawful application.
• Coordinate and deliver security capability training required by employees, security teams and third-party partners.
• Possess contractual assessment skills for the implementation and review of security contracts.
• Prepare reports including security incident reporting, intelligence briefings, threats assessments and investigative reports.
• Utilise an active regional security network to share security information, trends and evolving operational practice. Participate in industry forums and understand emerging security technologies.

• 10+ years' experience in corporate security roles.
• Experience in a significant leadership role.
• Experience working within large complex corporate environments
• Strong English language skills and the ability to develop influential relationships with stakeholders at all levels of an organisation.
• Proficient IT (Microsoft Suite) skills.

Desired:

• Experience in developing and delivering training
• Experience working in the Philippines with insight into local working practices and cultures.

• Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job offer.
• We operate a discretionary global bonus scheme that incentivises, and rewards individuals based on company and individual performance.
• Control Risks supports hybrid working arrangements, wherever possible, that emphasise the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.
• As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process.