Consultant - Information Security

Overview

The Security Consultant ensures security is embedded into technology solutions, cloud platforms, applications, infrastructure and business initiatives from design through implementation, partnering with Engineering, Product, Infrastructure, Cloud, Risk, Compliance and Global Information Security teams.

What you'll do

• Coordinate and perform first level security architecture reviews for applications, infrastructure, cloud deployments and technology initiatives.
• Ensure security review activities are completed within established timelines.
• Track security findings, risks, exceptions and remediation activities resulting from architecture reviews, penetration testing and vulnerability management.
• Facilitate the documentation and approval process for security exceptions and risk acceptances.
• Serve as the primary coordination point between the Global Security Architecture team and business, technology and project teams.
• Communicate security requirements, recommendations and status updates to relevant stakeholders.
• Prepare management reports, metrics, dashboards and status updates on InfoSec activities.
• Perform cloud security, application security and infrastructure security review activities.
• Support compliance initiatives involving ISO 27001, SOC 2, privacy, regulatory and customer security requirements.

What you'll need

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, Engineering or a related field.
• 5-8 years of experience in Network Security, Cloud Security, IT Compliance or Technology Project Coordination.
• Understanding of Security Architecture and Secure-by-Design principles.
• Knowledge of cybersecurity fundamentals, including identity and access management, network security, data protection, vulnerability management and application security.
• Familiarity with cloud security concepts across AWS or GCP environments.
• Experience working with cross-functional teams including Security, Engineering, Product, Infrastructure, Cloud and Business stakeholders.
• Experience supporting audits, regulatory reviews and security compliance initiatives.

Nice to have

• Relevant security certifications (Security+, ISO 27001, CISSP Associate or equivalent).

Details

• Hybrid position: virtual work combined with in-person work at an assigned TU office location for a minimum of two days a week.
• Location: Mumbai, India.