Total 94 Legal / Public / Security job vacancies in Bengaluru

The role is a traditional CM role for fit-out work experience 

Role within the project

• Should be able to lead a fit-out/base build project independently with the know-how of the following: Quantity survey, Rate Analysis, Value Engineering, Market Knowledge on pricing, procurement, post-contract management, tracking budget & commercial closure for Commercial Fit-out /base build projects. 

Job Objectives

• Pre and post-contract duties including preparation of cost estimates, procurement and tendering, contract administration, variation, final account, etc.
• Completing feasibility studies and writing procurement reports
• Estimating and cost planning to include producing and presenting the final cost plan
• Tendering and procurement activity, including managing the pre-qualification stage, producing the tender list, preliminaries, tender analysis, tender report and compiling the contractual documents
• Taking responsibility for timely and accurate cost checks and valuations
• Producing monthly post-contract cost reports and presenting them to the client
• Interfacing with the client and other consultants, at all project stages
• Participate effectively with post-contract cost variances and the change control processes
• Perform cost risk analysis and provide input into value engineering; negotiate and approve final accounts
• Maintain central feedback and learning on cost estimating from prospects and projects and contribute to updating of best practices in estimating

Skills Required

• Technical knowledge of interior fit-out /base build projects for a period of 6+years for CM/QS.
• Prior experience of handling base build projects is required and Candidates with Commercial project exposure could be prioritised, preferably should know background working on CostX 
• Good knowledge of all methods of construction and procurement.
• Experienced with or managing a team that uses multiple estimating tools and applications.
• Strong experience with spreadsheets and databases.
• The collaborative approach, able to develop strong relationships with clients and stakeholders, internally and externally.
• Good organization skills with the ability to multi-task.
• Demonstrated strong listening and communication skills.
• Proven cost and/or commercial management experience, ideally within a consultancy environment.

#LI-HT1

Position Type :

Type Of Hire :

Education Desired :

Travel Percentage :

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass

Position Type :

Type Of Hire :

Education Desired :

Travel Percentage :

Job Posting Description

As the world works and lives faster, FIS is leading the way. Our fintech solutions touch nearly every market, company and person on the planet. Our teams are inclusive and diverse. Our colleagues work together and celebrate together. If you want to advance the world of fintech, we’d like to ask you: Are you FIS?

About the team:

It’s an amazing opportunity to join a Talented team of innovative and committed folks doing interesting work at the world’s largest global provider dedicated to financial technology solutions!

What you will be doing:

• Develop policy and standards for API security.
• Collaborate with internal development teams to build/advocate security controls in Application Programming Interface (API), performing Threat Modeling, Static Application Security Testing (SAST), Software Composition Analysis(SCA).
• Assist in the strategy, standards, and architecture for the security aspects of the SDLC including application, APIs, DevSecOps, and CICD.
• Identify the gaps in SAST/SCA tool rule/configuration and work with vendor to engineer them to provide the maximum scanning coverage to applications.
• Experience and knowledge in Burp Suite tool for dynamic testing (DAST).
• Primarily responsible for API application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management)

What you bring:

• At least 5 years of working experience in application security that includes API, SAST and DAST along with Checkmarx, Veracode
• Knowledge of security technologies (encryption, data protection, design, privilege access, etc.)
• Proficiency in time management, communications, decision making, presentation and organizational skills
• Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules
• Excellent decision-making, analytical and problem solving skills
• Excellent verbal and written communication skills to technical and non-technical audiences of various levels in the organization
• Experience establishing and maintaining effective working relationships with employees and/or clients
• Strong knowledge of development and application security
• Hands-on experience performing application API security assessment, static and dynamic security assessments with tools such as: Burpsuite, OWASP ZAP, AppScan, WebInspect, Fortify, Veracode, Checkmarx, etc.
• Knowledge of OWASP Top 10/ SANS Top 25, identify vulnerabilities via manual and automated testing methods and how to effectively remediate vulnerabilities associated with each
• Expert knowledge of information security principles, web applications, and intermediate familiarity with malicious code and common hacking techniques used by malicious actors
• Experience conducting risk assessments and performing threat modeling of applications
• Ability to collaborate with teams remotely

What we offer you:

A career at FIS is more than just a job. It’s the change to shape the future of fintech. At FIS, we offer you:

• A voice in the future of fintech
• Always-on learning and development
• Collaborative work environment
• Opportunities to give back
• Competitive salary and benefits

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass

Position Type :

Type Of Hire :

Education Desired :

Travel Percentage :

Job Description - IT Security Analyst I

Location – Bangalore

Are you curious, motivated, and forward-thinking? At FIS you’ll have the opportunity to work on some of the most challenging and relevant issues in financial services and technology. Our talented people empower us, and we believe in being part of a team that is open, collaborative, entrepreneurial, passionate and above all fun.

About the team:

It’s an amazing opportunity to join a Talented team of innovative and committed folks doing interesting work at the world’s largest global provider dedicated to financial technology solutions.

What you will be doing:

In this role you will be performing all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.

• Executes projects for Information Security Management System implementation and audit inline to ISO 27001:2022 standard requirements.
• Support in SSAE18 SOC 1 and 2 assessments to assess controls at the organization level.
• Assist with the strategic objectives of the risk management program including execution of risk assessment activities, coordination of risk response and program testing and validation.
• Contribute to reviews of significant events and advise co-workers of action steps required to prevent future recurrence.
• Assist with risk assessments related to the Data Protection, Information Security and Enterprise Risk Management programs as well as other projects throughout various risk disciplines while identifying potential issues, control gaps and potential process efficiencies.
• Conduct risk analysis and present continuous control improvement ideas to team leadership.
• Create information security documentation related to work area and complete requests in accordance with company requirements.
• Responds to information security-related questions and inquiries using established information security tools and procedures.
• Resolves and/or performs follow through to resolve all information security issues and questions.
• Implements and administers information security controls using software and vendor security systems.
• Identifies opportunities and executes plans to improve workflow and understands and quantifies business impacts of those improvements for communication to management.
• Interfaces with user community to understand security needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security.
• Provides status reports on security matters to develop security risk analysis scenarios and response procedures.
• Other related duties assigned as needed.

What you bring

• Bachelor’s/master’s degree in computer science or the equivalent combination of education, training, or work experience
• Must have at least 2-3 years of experience in information systems security with knowledge on ISO 27001, SSAE 18/SOC I/SOC II.
• Hands-on experience in Information Security Management System implementation and audit inline to ISO 27001 standard.
• Must have worked or at a minimum have theoretical knowledge on Information Security Risk Assessment.
• Excellent Process and audit report documentation skills.
• Must have a broad knowledge of technology generally and Information Security technology and methodologies particularly.
• Have executed and/or managed security related Projects in the past.
• Knowledge of GLBA, ITGC, PCI, Cloud Security will be an added advantage.
• Knowledge of networks technologies (protocols, design concepts, access control)
• Knowledge of security technologies (encryption, data protection, design, privilege access, etc.)
• Proficiency in time management, communications, decision making, presentation and organizational skill.
• Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules
• Basic to intermediate decision-making and problem-solving skills
• Basic to intermediate verbal and written communication skills to technical and non-technical audiences of various levels in the organization
• Experience establishing and maintaining effective working relationships with employees and/or clients

Added bonus if you have:

• ISO 27001:2022 Lead Auditor or implementer certification
• CISSP, CISA, CRISC

What we offer you:

• A multifaceted job with a high degree of responsibility and a broad spectrum of opportunities
• The chance to work on some of the most challenging, relevant issues in financial services & technology
• A work environment built on collaboration, flexibility and respect
• A modern, international work environment and a dedicated and motivated team
• A variety of career development tools, resources, and opportunities

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass

Public Affairs seeks to share the IKEA experience and customer life at home with Indian regulators, legislators, and opinion-builders and position Inter IKEA Group as a trusted, competent, and preferred discussion partner. Making sure that the IKEA vision of safe, sustainable, and affordable products are supported by up-to-date legislation that is good for IKEA and good for the world.

As Public Affairs Leader, you will deliver to the strategic public affairs goals for Inter IKEA Group in India. Working in a dynamic and fast paced environment, this means leading projects related to regulatory issues that impact or could impact our ability to market and sell our products, underpinned by trade and sustainability. The assignment requires the ability to work effectively, efficiently, diplomatically, and calmly in a high-pressure environment on issues that are often complex and politically sensitive, bringing people with diverse cultures and perspectives together. The agenda is broad, and the tasks are many, including:

• Leading and managing priority public affairs projects as identified by the business, with a focus on product safety, supply chain, trade and sustainability.
• Identifying and developing trusted relationships with key policy-makers, regulators, business associations, and opinion leaders.
• Representing Inter IKEA Group in external forums such as business associations, committees and working groups
• Gathering and creating consensus among internal stakeholders and franchisees, fostering strong collaboration across IKEA
• Be up to date with and influence national legislations, industry standards and market developments

The person of distribution Sales will be responsible for implementing the overall strategic sales plan, targets and tools to monitor sales achievements. The person would also be responsible for the following activities:

1. Overall responsible for revenue through multiple distributors (Bosch Value Added Distributors), sub-dealers & retail channels in assigned South India states.
2. Identifying and building strategic partnerships with new distributors, sub-dealers, retail channels that can help in incremental growth with strong focus on margins.
3. Build strong relationship with all General Trade Distributors and ensure strong retail presence of Public Address & Conference system products.
4. Maximize overall Bosch BT Communication revenue, growth and visibility.
5. Participate in developing and updating Public Address & Conference system product choices for respective channels.
6. Should keep him self-updated with market and competition landscape.
7.  Take ownership of DSO, service and replacements across channels and work with the support team towards minimizing the same.
8. Co-ordinate with marketing team to ensure all distributors, retail channels get required marketing support to sell Public Address & Conference system.
9. Manage distributor, Channel relationships and keep them updated on the product portfolio by regular product orientations, webinars & training programs.
10. Ensuring consistent growth of Local for Local products ( L4L) products across the assigned states.
11. Maintain Monthly reports of distributors Purchase & Sales for internal sales analysis.
12. Effectively tap the untapped sectors & development of Karnataka, Andhra Pradesh, Telangana state.
13. Candidate should have experience in Product Planning and Analytics.
14. Distribution & Retail Experience - Direct or Agency.
15. Coordination with Marketing team for product promotion via online, offline, mobile, social media network.

Administration Requirement

1. Maintain opportunity funnel on CRM and update them on regular basis.
2. Travel Extensively in the territory assigned for business opportunity and increasing footprint.
3.  Proven team player with excellent communication and presentation skills.

Product Knowledge

1. Prior Experience in promoting & selling Public Address Conference system products to distributor and their channel partners.
2. Having clear fundamental on sound and understanding of Public address & Conference/ AV channel market.
3. Having the techno-commercial knowledge, containing awareness about the products trends in the industry.

  Education • General • Professional

• Bachelor’s degree in a computer-related field such as computer science, cyber/information security discipline, physics, mathematics or similar
• Master’s degree in business administration, information security, human resource management,
• Architecture: TOGAF/SABSA or similar
• Agile: Certified Scrum Master (CSM)
• General Information Security: CISSP, CISM/CISA or similar

Experiences (Years & Type) • Industry • Regional • Functional

• Banking or e-Commerce Industry experience of at least 2-3 years is necessary.
• Experience in the regional sector is not necessary but will be desirable since Middle East regulations apply heavily.
• Must have a minimum 7-10 years of experience in an Infrastructure and Security function with good background in information technology, stakeholder management and people management.
• Minimum 3-5 years’ experience, as an Infrastructure and Security Architect
• Minimum 3-5 years’ experience as an Enterprise & Data Architect
• Prior experience managing a team of 3-5 individuals.
• Budgeting, creating slide decks and presentation skills.
• Certification in Azure or AWS is added advantage 

Knowledge & Skills • Technical • Functional • Managerial

• Define, Document and implement the infra & security architecture for the IT projects including but not limited to the following:
• Authentication & authorization
• Account administration controls (provisioning, segregation of duties, validation, attestation, etc.)
• Auditing of critical security related events
• Confidentiality, Integrity, and Availability of the system and data.
• The architect should have sound knowledge on enterprise level target architecture in On Premises, public and private cloud platforms (IaaS/PaaS)
• Good hands-on experience solutioning technology architectures that involve securing web and mobile applications, identity management integration, perimeter protection, core protection and end-point protection/detection & API /Micro services Security.
• Good knowledge of the concerns and threats that revolve around Cloud Security and how those concerns can be mitigated (Technical)
• Deep foundational knowledge, understanding and application on all aspects of Information Security concepts from broad range of technical and non- technical areas (Technical)The architect has the skill to follow design principles and applies design patterns to enforce maintainable, readable, and reusable patterns, in the form of code or otherwise.
• The architect can understand the application architecture and interpret potential issues found in source or compiled code.
• The architect has automation skills/capability in the form of scripting or similar.
• The architect can propose options for solutions to the security requirements / patterns that provide a balance of security, user experience & performance.
• The architect has the skill to discuss and present solutions to other architecture, security, development, and leadership teams.
• The architect can interpret and understand vulnerability assessment reports and calculate inherent and/or residual risks based on the assessment of such reports.
• Ability to articulate and be a persuasive leader who can serve as an effective member of the senior management team. Good negotiation skills will be desirable.
• Must have good judgment skills in order to decide on an exception approval.
• Ability to enforce improvements when necessary using Influence rather than Policing measures.
• Superior written and verbal communication skills in order to effectively communicate security threats and recommendations to technical or non-technical stakeholders.
• Knowledge of application of Agile methodologies/principles such as Scrum or Kanban

Key Responsibilities

• Infrastructure design for various business & Technology Initiatives
• Acts as expert for infrastructure teams in the plan, design, and delivery of IT solutions
• Advises teams of IT technology standard requirements, methodology and processes.

• Maintenance of Policies & Standard Decisions for Infra Design
• Ensure delivery of cost effective & high-quality design within timelines of the project / initiative.
• Delivery and Maintenance of Infra model as design assets using design and architecture tools.
• Design of integrated solution for software defined datacentre
• Engage with partners & vendors to baseline Infra design decisions.
• Participates in proof of concepts to assist in defining technology direction and enabling business strategy.
• Manage relevant stakeholders & sign off authorities for closure and transition of design to provision.
• Acquire knowledge and take over design aspects of newly on boarded technologies in Infra.
• Review other domains of design such as application, services, and data to identify impact areas in Infra and Other domains
• Deploying Enterprise architecture on AWS / Azure
• Implementing AWS (or equivalent) services in variety of distributed computing environments
• Integration of AWS cloud service with on-premises systems.
• Migrating workloads from on-premises systems to AWS cloud using appropriate tools and technology
• Key Work-Related Tasks and Performance Indicators: -
• The Technical Architect needs to understand the IT landscape in detail from a capability standpoint.
• Aware of the Enterprise Architecture design principles
• Ensure 100% compliance to standards / principles set by Bank / Enterprise Architect in solution design
• Maintain high degree of Relationship and professional rapport with any IT / Partner / Business stakeholder being dealt with for the overall requirement.
• Deliver high quality specs and ensure 100% completeness of solution.
• Perform effective design reviews to ensure that no gaps are created in design.
• Design sustainable and high performing solution
• Provide Security solution on AWS and security best practices.
• Infrastructure capacity sizing, costing of AWS services to drive optimized solution architecture.
• monitoring and performance tuning of deployed applications on AWS.

Use appropriate tools and technologies for cloud management (monitoring, patching, backup, etc…)

Your Career

Palo Alto Networks is disrupting the Cyber Security industry!  We are looking for a Senior Cloud and firewall Engineer to join our Infosec team that owns, securing and delivering security for our Enterprise, SaaS, and Public Cloud security services. With your networking, firewall, cloud, and development skills, you’ll design, build automation and integrate along with our secure programs – scale and secure our infrastructure and application in a Google Cloud Platform environment as well as collaborate with other team members. In this role, you will provide technical leadership in the development of Security programs by helping to drive the disruptive vision, technology planning, and estimation. If you are a fast learner and passionate about Cyber Security, this is a great opportunity for you!

Your Impact

• Providing advanced operations and engineering support for critical systems and services, including application and security infrastructure on-prem and in the cloud.

• Responsible for assessing and reviewing the security and cloud infrastructure on IT and production environment.

• Coordinates with various teams to ensure appliances and services are configured with the correct posture to support business requirements.

• In-depth knowledge of designing and implementing a Zero-Trust Network Architecture, including segmentation

•  Continuous monitoring and improvement on the IT Support and accelerate scalability, reliability, and performance improvement in the product infrastructure.

• Assist in maintaining strong oversight with cloud computing solutions to safeguard against undue risk presented by external entities.

• Engage the community across multiple channels, looking to share, educate, and inspire. In particular, manage the strategic relationship with key security vendors in the Identity space.

• Develop automation using SOAR tool on tasks that could be automated to improve efficiency of the team.

• Work with different teams in unison outside the Security Fusion Center such as Vulnerability Mgmt, Network Teams, OS teams, Pen testing.

• Understand urgency and security risk and respond to critical vulnerabilities and data exposures.

• Perform traffic and port scans during an incident investigation.

We're looking for a Staff Engineer, Security Sustainment to join Procore's Cybersecurity department. In this role, you'll be responsible for ensuring Procore's security infrastructure is maintained at the highest level of protection and efficiency. The primary goal of this role is to support the security sustainment engineering team to maintain established security measures that protect Procore's systems and data.

As a Staff Engineer, Security Sustainment, you'll partner with various teams across Procore, including software engineering, IT, and compliance, to manage and enhance our existing security infrastructure. Use your expertise in cybersecurity and DevOps to ensure that our systems remain secure and up-to-date. This is a chance to make a significant impact in a company that values the safety and integrity of its data—Join us to be a part of our security-forward culture.

This position reports into the Manager, Security Sustainment Engineering and will be based out of our India offices. We're looking for someone to join us immediately.

What you'll do:

• Collaborate with security engineering teams to understand their sustainment needs and offload repeatable work
• Regularly review of infrastructure to keep it to date with existing security protocols and standards
• Develop and report on key security sustainment metrics
• Stay updated on latest security threats and technologies and recommend necessary changes
• Be a part of promoting a culture of security awareness within the company

What we're looking for:

• Bachelor's degree in Computer Science, Information Systems or equivalent experience
• Minimum of 8 years of experience in security engineering
• Strong knowledge of cybersecurity principles and best practices
• Experience with cloud technologies (AWS, Azure, Google Cloud)
• Familiarity with compliance standards such as ISO 27001, SOC 2, and GDPR
• Excellent communication and leadership skills
• CISM or CISSP certification is a plus
• Personal characteristics: Detail-oriented, proactive, and a strong team player

The Opportunity  

We, at Flywire, are looking for a BlueTeam Guy with a passion for tackling big problems. We need a BlueTeam Guy who can help protect Flywire's infrastructure and platform... of course the Flymates also.

The ideal candidate for this role will have experience in security anomaly detection tools and analytical capabilities to be able to implement security alerts and develop new use cases in order to increase preventative security. You also need to be comfortable collaborating closely with the RedTeam and Threat Intelligence teams in order to feed the systems with more relevant information.

Are you the type of person who finds ways to detect threats? Are you passionate about the new concept of cloud security? Are you curious about technology and the hunt for attacker activity? Are you looking for opportunities to learn and educate your talented peers and are you really excited to get constructively involved? If so, we have the perfect position for you.... You'll need a desire to tinker until it's reliable, robust and secure.

We would like to hire for our Security team a Blue teamer, a successful candidate for this position has technical knowledge and experience performing use cases in dynamic environments.

Candidates will need to be a strong leader with the ability to perform multiple types of analysis including providing mitigation recommendations for impacted parties.

• Implement and deploy new security tools in the environment
• Manage and improve detection tools (SIEM, SOAR, EDR, AV, DLP…)
• Purple team exercises, work with the red team to improve the detection and alerts.
• Provide recommendations and solutions to solve the security problems that we found, working closely with the developers team, SRE team and IT team.
• Support implementing new security projects.
• Knowledgeable of current tactics, techniques and procedures (TTP) used by threat actors and practical application of the MITRE ATT&CK framework or similar.
• Work closely with other team members to review existing policy and procedures, as well as developing new artifacts when appropriate.
• Develops and executes network monitoring and security operations
• Participate in on-call functions to support security operations with after-hours coverage.
• Development of security detection and alerting mechanisms.
• Performs necessary investigative and response functions to support security operations
• Automate process and procedures
• Knowledge of development languages (ruby, bash, python…)

Position Type :

Type Of Hire :

Education Desired :

Travel Percentage :

Job Description

Are you curious, motivated, and forward-thinking? At FIS, you’ll have the opportunity to work on some of the most challenging and relevant issues in financial services and technology. Our talented people empower us, and we believe in being part of a team that is open, collaborative, entrepreneurial, passionate and above all fun.

About the team

It’s an amazing opportunity to join a Talented team of innovative and committed folks doing interesting work at the world’s largest global provider dedicated to financial technology solutions!

What you will be doing

• Executes security controls to prevent hackers from infiltrating company information or jeopardizing programs.
• Researches attempted efforts to compromise security protocol and recommends solutions.
• Maintains security systems and administers security policies to control access to systems.
• Maintains company firewall and utilizes applicable encryption methods.
• Creates information security documentation related to work area and completes requests in accordance with company requirements.
• Responds to information security-related questions and inquiries using established information security tools and procedures.
• Resolves and/or performs follow through to resolve all information security issues and questions.
• Implements and administers information security controls using software and vendor security systems.
• Identifies opportunities and executes plans to improve workflow and understands and quantifies business impacts of those improvements for communication to management.
• Interfaces with user community to understand security needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security.
• Provides status reports on security matters to develop security risk analysis scenarios and response procedures.
• Other related duties assigned as needed.
 

What you bring:

• Knowledge of networks technologies (protocols, design concepts, access control)
• Knowledge of security technologies (encryption, data protection, design, privilege access, etc.)
• Knowledge of network design and engineering
• Proficiency in time management, communications, decision making, presentation and organizational skills
• Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules
• Basic to intermediate decision-making and problem solving skills
• Basic to intermediate verbal and written communication skills to technical and non-technical audiences of various levels in the organization
• Experience establishing and maintaining effective working relationships with employees and/or clients

EDUCATION REQUIREMENTS
Bachelor’s degree in computer science or the equivalent combination of education, training, or work experience.

FIS JOB LEVEL DESCRIPTION
Career professional role. Highly-skilled with extensive proficiency. Develops large and/or complex solutions that require analysis and research. Works on multiple projects as a project leader or frequently as the subject matter expert. Works on projects/issues of medium to high complexity that require demonstrated knowledge across multiple technical areas and business segments. Coaches and mentors junior technical staff. Works under minimal supervision on complex projects. Wide latitude for independent judgment. Typically requires five or more years of experience. Frequently reports to an IT Security Administration Manager.

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass

We, at Flywire, are looking for a Senior Incident Handler with Incident Commander responsibilities, you will be a pivotal leader in the organization's cybersecurity incident response efforts. Combining technical expertise with the ability to lead and coordinate incidents, you will play a crucial role in safeguarding the organization against cyber threats.

Candidates will need to be a strong leader with the ability to perform multiple types of analysis including providing mitigation recommendations for impacted parties.
 

• Assume the role of Incident Commander during cybersecurity incidents, providing strategic direction and coordination.
• Lead and orchestrate the incident response team, ensuring effective communication and collaboration, externally and internally.
• Lead technical aspects of incident response, including analysis, containment, eradication, and recovery efforts.
• Provide technical guidance to the incident response team during high-stress situations.
• Conduct in-depth technical analysis of security incidents, identifying malware, attack vectors, and other technical indicators.
• Knowledge on AWS and managing incidents in cloud environments.
• Knowledge using forensic tools and techniques to gather and analyze digital evidence.
• Design and implement technical mitigation strategies, ensuring the rapid containment and eradication of security threats.
• Collaborate with cybersecurity teams to implement technical controls and preventive measures.
• Interface with technical teams, to coordinate technical incident response efforts.
• Communicate technical details, impact assessments, and remediation efforts to leadership and stakeholders.
• Stay abreast of emerging technical threats, vulnerabilities, and incident response technologies.
• Evaluate and enhance technical incident response procedures based on lessons learned and industry best practices.
• Conduct technical training sessions for the incident response team, Oncall team and Security team staff.
• Mentor junior technical incident handlers, fostering technical skill development.
• Participate in on-call functions to support security operations with after-hours coverage.
• Process and procedures automation.
• Integrate Threat intelligence into incident response strategy.
• Support implementing new security projects.
• Knowledgeable of current tactics, techniques and procedures (TTP) used by threat actors and practical application of the MITRE ATT&CK framework or similar.
• Work closely with other team members to review existing policy and procedures, as well as developing new artifacts when appropriate
• Be part of the oncall team.

Job Title: Security Manager - Infrastructure Security (Identity and Access Management)
Department: Cybersecurity - Identity and Access Management (IAM)
Job Summary:
We’re seeking a highly skilled and experienced Security Manager to oversee the implementation and scaling of identity and access management controls within our infrastructure. The ideal candidate will be responsible for managing and leading a team to secure the company’s infrastructure in the IAM area; ensuring that all access control mechanisms and related infrastructure meet the company’s standards and policies.
Key Responsibilities:
1. Team Building:
• This is a new team. The successful candidate will be expected to hire a team of eight in Bangalore; India.
2. Internal Collaboration:
• Build rapport with internal teams to ensure effective communication and collaboration on IAM projects.
3. Infrastructure Security Management:
• Oversee the security of IAM-related infrastructure; including servers; databases; networks; and cloud environments.
• Implement and manage security controls to protect against threats such as unauthorized access; data breaches; and cyberattacks.
• Conduct regular security assessments; audits; and vulnerability scans to identify and mitigate risks.
4. Access Control and Identity Management:
• Ensure the secure implementation of access control mechanisms; including multi-factor authentication; role-based access control; and least privilege principles.
Qualifications:
• Bachelor’s degree in Information Technology; Computer Science; or a related field. A Master’s degree is a plus.
• Minimum of 7 years of experience in IT security; with at least 5 years in a management role.
• Extensive experience in leading security operations teams and a solid background in Identity and Access Management (IAM).
• Strong understanding of security frameworks and compliance standards (e.g.; ISO 27001; NIST; GDPR).
• Experience with Azure security.
• Excellent analytical; problem-solving; and decision-making skills.
• Strong leadership and communication skills with the ability to work collaboratively across departments.

Main Purpose: 

• We are is looking to recruit an Information Security Consultant to join our existing Information Security team.
• Working with the Information Security team to provide advice and guidance on IT security and further develop IT policies and processes across a multi-region infrastructure consisting of 8300+ staff and 100+ sites.
• As a member of the IT Security team, you will review all aspects of the IT environment and its components. This role shall be responsible for supporting and maintaining enterprise-wide solutions. The successful candidate will be required to proactively improve and provide advice and guidance on information security matters.

Key Responsibilities:

• Assist with security incident management and response activities.
• General day-to-day support on managing and responding to security alerts from systems and end users.
• Perform daily, weekly, and monthly security checks, reconciliation and compliance checks and investigate exceptions.
• Completing client security requirement questionnaires and support the bidding process ▪ Identify and raise awareness of security risks.
• Develop and enhance security policies, processes, procedures, and technical controls to strengthen Turner & Townsend’s security capabilities and resilience to cyber threats.
• Take a proactive role in identifying security risks, mitigations, and opportunities to strengthen Turner & Townsend’s resilience to cyber-attacks and security incidents.
• Participate in the design and implementation of systems and applications.
• Develop user and technical training guides.
• Maintain and manage the IT Risk register.
• Test DR plans and capabilities to ensure they work as designed, identifying gaps and lessons learnt and work with the business to drive continual development and enhancement.

 #LI-HT1

We are looking for dynamic leader with over 6+ years of experience in Information Security and Security Operation Centre. Expertise in network security, data security, endpoint security. Skilled in conducting security risk and gap assessments.

• IT Infrastructure and application architecture design security risk assessment, data flow security risk assessment, design, implement, and manage security solutions and applications
• Oversee the design, implementation, and maintenance of the company's information systems, including software, hardware, and networks, ensuring security in balance with functionality and user-friendliness
• Develop, document and implement Information Security policy, standards, process, guideline documents based on client requirements and assess Information systems against these requirements
• Hands on experience with Firewall, IPS, WAF, VPN. (Minimum 3+years of experience as admin of the Firewall/IPS)
• Hands on experience on Antivirus, SIEM, DLP.
• Conduct Information security risk and gap assessment during migration, mergers, acquisition
• Third party tool/software/application/service security risk assessment
• Review IT change requests from security and compliance perspective