Third Party Security Analyst

Site Name: Bengaluru Luxor North Tower Posted Date: Jun 29 2022 Are you looking to expand your expertise in IT Support within a global environment that allows you to keep pace with the speed of change? At GSK, we are transforming how new technologies are used to improve performance across the organization. As an IT Service Delivery Manager, you will be responsible for handling multiple IT Security incidents, responding in a timely manner and with a fine attention to detail. This role will provide YOU the opportunity to lead key activities to progress YOUR career, these responsibilities include some of the following… Triaging and routing of Computer Security Incident Response (CSIR) cases. Resolution of low severity CSIR incidents. Supporting forensic engagements under the supervision of CSIR Managers, investigating effectively and persistently to mitigate risk and identify root cause. Assisting in continuous improvement initiatives within the CSIR team. Assimilating large amounts of data and documentation to ensure process adherence. Why you? Basic Qualifications: We are looking for professionals with these required skills to achieve our goals: Experience in evaluating third parties for the presence of fundamental cybersecurity controls. Experience conducting risk assessments and applying concepts of inherent and residual risk in order to draw appropriate conclusions and articulate the same to non-technical audiences. Negotiating risk elements, mitigation plans, and risk acceptance together with external suppliers and business supplier relationship owners to ensure protection of company assets Ability to communicate effectively with highly technical security specialists internally and externally as well as business process and data owners Ability to operate autonomously in the execution of third-party security risk program framework. Preferred Qualifications: Experience and knowledge across different frameworks and standards such as ISO 27001, NIST, CIS etc. Experience as an in-house or commercial information security and risk consultant with experience in either an IT security assurance or audit function and/or experience in assessment of technical controls against a documented set of standards and best practices Working and co-operating with virtual teams located in different countries around the world, aligning and adapting different work, culture and communication styles. Ability to deal with conflicting priorities in alignment with overall business and departmental strategies. An awareness of information and application cybersecurity techniques, common vulnerabilities, and emerging exploits. Broader knowledge of information security and operational technology controls, technologies and processes. Why GSK? Our values and expectations are at the heart of everything we do and form an important part of our culture. These include Patient focus, Transparency, Respect, Integrity along with Courage, Accountability, Development, and Teamwork. As GSK focuses on our values and expectations and a culture of innovation, performance, and trust, the successful candidate will demonstrate the following capabilities: Operating at pace and agile decision-making – using evidence and applying judgement to balance pace, rigor and risk. Committed to delivering high quality results, overcoming challenges, focusing on what matters, execution. Continuously looking for opportunities to learn, build skills and share learning. Sustaining energy and well-being. Building strong relationships and collaboration, honest and open conversations. Budgeting and cost-consciousness. Our goal is to be one of the world’s most innovative, best performing and trusted healthcare companies. We believe that we all bring something unique to GSK and when we combine our knowledge, experiences and styles together, the impact is incredible. Come join our adventure at GSK where you will be inspired to do your best work for our patients and consumers. A place where you can be you, feel good and keep growing. Important notice to Employment businesses/ Agencies GSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site.