Hyderabad
11 months ago
JOB ID:118365
Job details
Job Type
Full Time
Work Mode
Work From Office
Functional Area
IT/Software Development - Network Administration/Security
Industry
Banking/Financial Services/Insurance
Education
Not Specified
Experience Required
2 - 4 Yrs
Key Skills Required
security risk assessments, is risk management concepts, us banking regulations & industry best practices, it sox 404, nist, pci dss, hipaa
Other Skills Required
Job Description
Title: Senioí Analyst - IS Risk Management
Company Overview:Synchrony (NYSE: SYF) is a premier consumer financial services company delivering one of the industry’s most complete digitally enabled product suites. Our experience, expertise and scale encompass a broad spectrum of industries including digital, health and wellness, retail, telecommunications, home, auto, outdoors, pet and more.We have recently been ranked #5 among India’s Best Companies to Work for 2023, #21 under LinkedIn Top Companies in India list, and received Top 25 BFSI recognition from Great Place to Work India. We have been ranked Top 5 among India’s Best Workplaces in Diversity, Equity, and Inclusion, and Top 10 among India’s Best Workplaces for Women in 2022.
We offer 100% Work from Home flexibility for all our Functional employees and provide some of the best-in-class Employee Benefits and Programs catering to work-life balance and overall well-being. In addition to this, we also have Regional Engagement H... See More
Company Overview:Synchrony (NYSE: SYF) is a premier consumer financial services company delivering one of the industry’s most complete digitally enabled product suites. Our experience, expertise and scale encompass a broad spectrum of industries including digital, health and wellness, retail, telecommunications, home, auto, outdoors, pet and more.We have recently been ranked #5 among India’s Best Companies to Work for 2023, #21 under LinkedIn Top Companies in India list, and received Top 25 BFSI recognition from Great Place to Work India. We have been ranked Top 5 among India’s Best Workplaces in Diversity, Equity, and Inclusion, and Top 10 among India’s Best Workplaces for Women in 2022.
We offer 100% Work from Home flexibility for all our Functional employees and provide some of the best-in-class Employee Benefits and Programs catering to work-life balance and overall well-being. In addition to this, we also have Regional Engagement H... See More
Title: Senioí Analyst - IS Risk Management
Company Overview:Synchrony (NYSE: SYF) is a premier consumer financial services company delivering one of the industry’s most complete digitally enabled product suites. Our experience, expertise and scale encompass a broad spectrum of industries including digital, health and wellness, retail, telecommunications, home, auto, outdoors, pet and more.We have recently been ranked #5 among India’s Best Companies to Work for 2023, #21 under LinkedIn Top Companies in India list, and received Top 25 BFSI recognition from Great Place to Work India. We have been ranked Top 5 among India’s Best Workplaces in Diversity, Equity, and Inclusion, and Top 10 among India’s Best Workplaces for Women in 2022.
We offer 100% Work from Home flexibility for all our Functional employees and provide some of the best-in-class Employee Benefits and Programs catering to work-life balance and overall well-being. In addition to this, we also have Regional Engagement Hubs across India and a co-working space in Bangalore.
Organizational Overview:
Synchrony’s Information Security Risk Management programs mission is to protect and enable Synchrony's business by integrating security risk management into our Technology landscape by proactively addressing emerging risk themes. Members of this group would have diversified exposure to Assessments and Audits(PCI, HIPAA etc.), Issue Management, Third Party Risk Management, Mergers & Acquisitions and Assurance.Role Summary/Purpose:
This role would be muti-faceted and would support information security risk management activities such as Data Share requests, Job Aids maintenance, RIM/ILM Activities, Third Party risk Management, New Joiner Awareness Sessions and PCI Supplier oversight. The role will provide oversight to ensure that controls are adequate to meet legal, regulatory, policy, standards, and security requirements. The role will participate in audits, reviews, and assessments to ensure compliance with multiple compliance and regulatory standards and frameworks including, but not limited to NIST, PCI-DSS, SOX 404, etc.You’re the one we’re looking for if you:
Perform risk assessments of outbound(external) data sharing requests
Review SRS tools(Security Rating services) for external entities to assess potential risks factors based on their security posture and identify historic cyber events/incidents/data breaches
· Support RIM/ILM activities for Information Security L3 functions
Maintenance and Renewal of Information Security Job Aids for all Infosec teams.
Support Third Party Risk Management activities such as Risk Profiles, Critical Vulnerability Surveys, Metrics and Reporting.
Drive PCI Suppliers oversight activities by performing analysis of in-scope suppliers, gathering artifacts/documentation from supplier and maintaining inventory of suppliers' PCI artifacts, along with ongoing monitoring of their PCI compliance.
Gather supporting evidence for PCI 4.0 supplier oversight controls and present to external auditor QSA for review.
Deliver security awareness sessions as part of employee onboarding process for India central hub.
Partner with Security, IT, and business functions to identify solutions to remediate assessment findings which meet regulatory, compliance and business needs
Support administrative and maintenance tasks associated with GRC Tools(Navex, Coupa etc.)
Evaluate and communicate security risks and solutions to business partners and IT management/staff
Support development of security risk management procedures and standards.
Develop metrics, reporting and support ongoing monitoring program to ensure processes working as designed and risks are being tracked
Support risk management special projects for PCI, Client assessments etc.
Required Skills/Knowledge:
Bachelor’s degree in Computer Engineering or related field, with a minimum of 2 years of experience in Information Security OR in lieu of the Bachelor's degree, a minimum of 4 years of experience in Information Security.
Minimum 2 years of experience conducting security risk assessments
Good understanding of IS Risk Management Concepts
Good understanding of IT related US Banking regulations & industry best practices (IT SOX 404, NIST, PCI DSS, HIPAA etc.)
Excellent interpersonal skills with ability to influence team members, management & external groups
Self-motivated & able to work independently or in a team environment & work with virtual teams
Desired Skills/Knowledge:
In depth understanding of Information Security and Risk Management foundational concepts
Good understanding of data protection concepts and technologies
Ability to collaborate and work with various business teams like SMP, CDO etc.Work Timings: Flexible Shift
(WORK TIMINGS: This role qualifies for Enhanced Flexibility and Choice offered in Synchrony India and will require the incumbent to be available between 06:00 AM Eastern Time – 11:30 AM Eastern Time (timings are anchored to US Eastern hours and will adjust twice a year locally). This window is for meetings with India and US teams. The remaining hours will be flexible for the employee to choose. Exceptions may apply periodically due to business needs. Please discuss this with the hiring manager for more details.) See Less
Company Overview:Synchrony (NYSE: SYF) is a premier consumer financial services company delivering one of the industry’s most complete digitally enabled product suites. Our experience, expertise and scale encompass a broad spectrum of industries including digital, health and wellness, retail, telecommunications, home, auto, outdoors, pet and more.We have recently been ranked #5 among India’s Best Companies to Work for 2023, #21 under LinkedIn Top Companies in India list, and received Top 25 BFSI recognition from Great Place to Work India. We have been ranked Top 5 among India’s Best Workplaces in Diversity, Equity, and Inclusion, and Top 10 among India’s Best Workplaces for Women in 2022.
We offer 100% Work from Home flexibility for all our Functional employees and provide some of the best-in-class Employee Benefits and Programs catering to work-life balance and overall well-being. In addition to this, we also have Regional Engagement Hubs across India and a co-working space in Bangalore.
Organizational Overview:
Synchrony’s Information Security Risk Management programs mission is to protect and enable Synchrony's business by integrating security risk management into our Technology landscape by proactively addressing emerging risk themes. Members of this group would have diversified exposure to Assessments and Audits(PCI, HIPAA etc.), Issue Management, Third Party Risk Management, Mergers & Acquisitions and Assurance.Role Summary/Purpose:
This role would be muti-faceted and would support information security risk management activities such as Data Share requests, Job Aids maintenance, RIM/ILM Activities, Third Party risk Management, New Joiner Awareness Sessions and PCI Supplier oversight. The role will provide oversight to ensure that controls are adequate to meet legal, regulatory, policy, standards, and security requirements. The role will participate in audits, reviews, and assessments to ensure compliance with multiple compliance and regulatory standards and frameworks including, but not limited to NIST, PCI-DSS, SOX 404, etc.You’re the one we’re looking for if you:
Perform risk assessments of outbound(external) data sharing requests
Review SRS tools(Security Rating services) for external entities to assess potential risks factors based on their security posture and identify historic cyber events/incidents/data breaches
· Support RIM/ILM activities for Information Security L3 functions
Maintenance and Renewal of Information Security Job Aids for all Infosec teams.
Support Third Party Risk Management activities such as Risk Profiles, Critical Vulnerability Surveys, Metrics and Reporting.
Drive PCI Suppliers oversight activities by performing analysis of in-scope suppliers, gathering artifacts/documentation from supplier and maintaining inventory of suppliers' PCI artifacts, along with ongoing monitoring of their PCI compliance.
Gather supporting evidence for PCI 4.0 supplier oversight controls and present to external auditor QSA for review.
Deliver security awareness sessions as part of employee onboarding process for India central hub.
Partner with Security, IT, and business functions to identify solutions to remediate assessment findings which meet regulatory, compliance and business needs
Support administrative and maintenance tasks associated with GRC Tools(Navex, Coupa etc.)
Evaluate and communicate security risks and solutions to business partners and IT management/staff
Support development of security risk management procedures and standards.
Develop metrics, reporting and support ongoing monitoring program to ensure processes working as designed and risks are being tracked
Support risk management special projects for PCI, Client assessments etc.
Required Skills/Knowledge:
Bachelor’s degree in Computer Engineering or related field, with a minimum of 2 years of experience in Information Security OR in lieu of the Bachelor's degree, a minimum of 4 years of experience in Information Security.
Minimum 2 years of experience conducting security risk assessments
Good understanding of IS Risk Management Concepts
Good understanding of IT related US Banking regulations & industry best practices (IT SOX 404, NIST, PCI DSS, HIPAA etc.)
Excellent interpersonal skills with ability to influence team members, management & external groups
Self-motivated & able to work independently or in a team environment & work with virtual teams
Desired Skills/Knowledge:
In depth understanding of Information Security and Risk Management foundational concepts
Good understanding of data protection concepts and technologies
Ability to collaborate and work with various business teams like SMP, CDO etc.Work Timings: Flexible Shift
(WORK TIMINGS: This role qualifies for Enhanced Flexibility and Choice offered in Synchrony India and will require the incumbent to be available between 06:00 AM Eastern Time – 11:30 AM Eastern Time (timings are anchored to US Eastern hours and will adjust twice a year locally). This window is for meetings with India and US teams. The remaining hours will be flexible for the employee to choose. Exceptions may apply periodically due to business needs. Please discuss this with the hiring manager for more details.) See Less
Requirements
No Data Available
Responsibilities
No Data Available
Company Benefits
No Data Available
About Company
PRODUCTS
- Digital: Comprehensive payments and financing solutions for our partners and customers through fully integrated digital products and experiences.
- Health & Wellness: Through a wide network of partners and providers, we offer the healthcare financing solutions to help customers find the care they need for their family and pets, when they need it.
- Home & Auto: Helping customers manage, maintain, and improve their homes and autos through Synchrony Car Care, Synchrony Home and a broad network of more than one million merchants.
- Diversified & Value: In partnership with national or regional retailers, we seamlessly integrate the customer experience across in-store and digital purchases for their everyday needs or discretionary purchases.
- Lifestyle: We provide more buying power for major consumer purchases in lifestyle merchandise such as sporting goods, powersports, clothing, jewelry and music.
PRODUCTS
- Digital: Comprehensive payments and financing solutions for our partners and customers through fully integrated digital products and experiences.
- Health & Wellness: Through a wide network of partners and providers, we offer the healthcare financing solutions to help customers find the care they need for their family and pets, when they need it.
- Home & Auto: Helping customers manage, maintain, and improve their homes and autos through Synchrony Car Care, Synchrony Home and a broad network of more than one million merchants.
- Diversified & Value: In partnership with national or regional retailers, we seamlessly integrate the customer experience across in-store and digital purchases for their everyday needs or discretionary purchases.
- Lifestyle: We provide more buying power for major consumer purchases in lifestyle merchandise such as sporting goods, powersports, clothing, jewelry and music.
