About the role
Within Societe Generale Global Solution Center (SGGSC), you will join the Information Security & Risk (ISR) team based out of Bengaluru, as Cyber Security Senior analyst contributing to the information security and risk management practice.
As a Cybersecurity Consultant, you will be part of the SG Group’s MIBS (Mobility International Retail Banking and Financial Services) division.
Based in Bangalore, you will manage infosec operations and responsibilities across regions and collaborate closely with security and IT Support teams of AYVENS division to coordinate cybersecurity operations, governance activities, manage compliance efforts, and support audit readiness.
You will play a vital role in presenting evidence to stakeholders, identifying risks, implementing security controls, conducting risk awareness& training staff in line with organizational and regulatory expectations.
The role involves working in a fast‑paced, high‑pressure environment that requires assertiveness, flexibility, and the ability to meet deadlines based on defined milestones.
The main responsibilities in the role are:
Compliance: Ensure compliance with relevant external regulations and internal standards, such as GDPR, ISO 27001, and others.
Govern and oversee GDPR / AAS / DORA / SCHREMS compliance for Application Security and Third-Party Risk Management
Monitor ITRM KRIs and deliver remediation plans
Ensure availability and maintenance of NIST control evidence..
Develop, implement, and manage comprehensive security compliance programs.
Policy Development: Create and enforce security policies, procedures, and guidelines to maintain compliance.
Audit and Assessment: Collaborate to conduct regular audits and assessments to identify compliance gaps and ensure adherence to security standards.
Risk Management: Identify, assess, and mitigate compliance risks to the organization.
Deliver Risk analysis on Business request (new apps, new projects, new vendors…)
Ensure Risk Acceptances are registered and follow-up actions are tracked to closure.
Lead Security exception Validation.
Conduct awareness sessions to LOD1 Infosec team on Risk Management
RFP Support
Respond to customer security questionnaires and review security clauses.
Incident Response: Lead the response to security incidents, ensuring proper documentation and resolution in line with compliance requirements.
Training and Awareness: Develop and deliver training programs to increase awareness of security compliance across the organization.
Design, launch and reportingof phishing campaigns and conduct awareness sessions.
Monitoring and Reporting: Monitor IT systems for potential risks and vulnerabilities and provide regular reports to senior management.
Responsible of internal/external audit monitoring and reporting – global CISO ownership.
Ensure the follow-up of audit recommendations (Inspection, external auditors, regulators, etc.).
Monitor and coordinate the timely closure of audit recommendations.
Work closely with IT, legal, and business teams to integrate compliance requirements into business processes.