About the role
The Mandatory skills we are looking for this role is as below:
Location: Chennai
Budget: 14 LPA – 19 LPA
Experience: 7 - 9 Years
Direct Responsibilities
IT Security architecture
o With a thorough understanding of the organization's technology and IT systems, planning, researching, and designing security architectures.
o Reviewing, and approving the security requirements for applications and IT setup
o Ensure the compliance level of the applications with the Security architecture standards including Third-party and cloud security risks.
o Ensure the protection of WM business data with an adequate security level of WM assets based on review processes.
o Identify the IT security risks in advance, record, and follow-up on them.
o Ensure the regular reporting to the management.
Transversal Security Projects
o Participate and follow-up on different transversal initiatives to improve the security standpoint of WM
o Ensure the progress and the follow-up of the different initiatives and report it to the management
o Identify, record and report on IT Risks identified throughout the different initiatives
IT security compliance
o Ensure the alignment with the Group and WM GAIM security policies, for both project and production assets
o Ensure the compliance with regulatory bodies requirements, including for APAC (HKMA, MAS), EU (GDPR), Switzerland (FINMA)
o Leveraging on a deep knowledge of Security standards such as NIST, CIS, ISO2700x , ensure the compliance with the IT security requirements
o Ensure the compliance with the Third-party Technology risks and the Cloud security
IT Data Management and Data analytics/science technologies
o Keep up with the knowledge of Data security and protection regulatory landscape and related measures.
o Understand the Data analytics and data sciences technologies (data standard practices including products / cloud related solutions.
o Ensure the solutions of Data Management, Data analytics and data science solutions are implemented with the Group security architecture requirements (e.g. Tableau, PowerBI, AI and other Data analytics solutions). This would also include the development framework and environments highly used in DA landscape (R, Python, DevSecOps and API management)
o Identify the IT security risks in advance, record and follow-up them.
o Ensure the regular reporting to the management.
Coordination with IT Security actors
o Alignment on the objectives and means, contribution to the different global reporting (WM Cybersecurity Committee, WM Project Architecture and Security validation committees, Application Security Dashboard…).
o Coordination with the Global security teams concerning integration of WM assets within production sites.
o Keeping abreast of initiatives by the IT Security community within the Group and other IT Security stakeholders within the Group.
Contributing Responsibilities
Participate in the evolution of Security Posture
o Participate in the deployment of new security practices and DevSecOps pipeline
o Ensure that SSDLC practices are well followed
o Take part in the awareness and training activities
o Report on the risks and security deviations identified
Essential Technical Knowledge
Network protocols and network connectivity concepts; Firewall and Internet technologies: Deep Knowledge
Secure application design and architecture principles – including DevSecOps tools and practices (CI/CD): Deep Knowledge
Secure access control mechanisms: Encryption and Key Management techniques: Deep Knowledge
Technical proficiency in various Operating Systems (Linux, Windows, AS400) and Databases (Oracle, MSSQL, PostGreSQL, MongDB) Deep Knowledge
Knowledge of understanding digital transformation and mobile technologies and Cloud (Containers Docker, Kubernetes): Deep Knowledge
Knowledge of emerging technologies (NFT, encryption): Good
Knowledge in technologies like OAuth, Single Sign On, API based approach, TDD, BDD: Good
Knowledge of standard IT Security concepts and methodologies: Deep Knowledge
Deep understanding of cybersecurity threats and remediation options: Deep Knowledge
IT Security Risk Assessment and Risk Management: Deep Knowledge
Essential Banking Knowledge Banking Knowledge and understanding of Wealth Management specificities General Knowledge International and APAC banking regulations: Deep Knowledge