Senior Cyber Security Consultant (GRC)

Company: Cognizant
Location: Montgomery
Posted on: November 18, 2020

Job Description:

Cognizant Technology Solutions is currently seeking a highly skilled Senior Cyber Security Consultant (GRC) who will be responsible to drive the entire security project of an engagement and work with our Cyber Security team at Cognizant Infrastructure Services business unit. Ability to work independently and remotely, with willingness travel for client engagements as needed. Required Qualifications: · Minimum 13 years’ experience in cyber security, information security & security standards, governance and compliance. · Enterprise IT security risk assessments and related frameworks (e.g., ISO 27000 series, NIST 800 Series, COBIT, IT General Controls, etc.) · Conceptual knowledge of the following regulations: PCI, Sarbanes-Oxley, HIPAA, GLBA, FISMA · Knowledge of Network security, Vulnerability Scanning & SIEM tools, SOC Operations, integrating devices & application with SIEM, VPN. · Excellent knowledge on TCP/IP suite, security process & protocols. · Knowledge of NAC, WAF, FIM, PIM. · High-level understanding of multi-tiered applications, load balancing & the firewalls · Should have clear understanding of Security controls to be able to participate in internal and external audits in customer engagement · Aware of Access reviews and able to independently manage access reviews for all IAM tools · Must have hands on experience in managing customer security audits for IAM controls. This requires active knowledge of controls and its applicability SOX and GxP) given the different identity and access tools and cloud platforms in place. Able to collaborate between technical teams and customer compliance leads. · Must have clear understanding of Business Continuity Management, processes and documentation. · Able to manage DR activities in collaboration with technical teams, be able to plan execute and report accordingly with customer · Capable of managing and effectively documenting Security risks for any engagement limited to scope. · Good to have : exposure to life-science customer engagements , awareness on Cloud Security controls for Identity and access management · Excellent analytical and problem solving skills required. Excellent verbal and written communication skills Responsibilities: · Monitor & advice on information security issues related to the systems & workflow to ensure the internal security controls for the organization are appropriate & operating as intended. · Coordinate response to information security incidents, work with delivery team & client to identify corrective actions & take these to closure. · Develop & ensure practice of Information Security policies, procedures, standards & guidelines based on organization & client specific security policy. · Conduct assessment, security audits, & manage remediation plans. · Design, Monitor, assess, & fine-tune business continuity & disaster recovery program & perform risk assessment reviews. · Design of training & security policy awareness, monitoring compliance with IT security policy · Collaborate with IT management to continually evolve the IT security aspects of systems & infrastructure to enable secure information exchange & reduce risk. · Perform Risk assessment for new deployment prior to the production setup · Seeking to build in security during the development of software systems, networks & data centers · Looking for vulnerabilities & risks in hardware & software · Addressing the security vulnerability on finding a potential threat or attempted breach. Preferred Qualifications: A cybersecurity industry certification is preferred from one of the following CISSP, CISM, CISA, CHFI Our strength is built on our ability to work together. Our diverse backgrounds offer different perspectives and new ways of thinking. It encourages lively discussions, inspires thought leadership, and helps us build better solutions for our clients. We want someone who thrives in this setting and is inspired to craft meaningful solutions through true collaboration. If you’re comfortable with ambiguity, excited by change, and excel through autonomy, we’d love to hear from you.

Keywords: Cognizant, Montgomery , Senior Cyber Security Consultant (GRC), Other , Montgomery, Alabama