Security Expert

Position Description
Company Profile:
Founded in 1976, CGI is among the largest independent IT and business consulting services firms in the world. With 94,000 consultants and professionals across the globe, CGI delivers an end-to-end portfolio of capabilities, from strategic IT and business consulting to systems integration, managed IT and business process services and intellectual property solutions. CGI works with clients through a local relationship model complemented by a global delivery network that helps clients digitally transform their organizations and accelerate results. CGI Fiscal 2024 reported revenue is CA$14.68 billion and CGI shares are listed on the TSX (GIB.A) and the NYSE (GIB). Learn more at cgi.com.
Job Title: Security Expert
Position: Security Specialist
Experience: 5-8 Years (preferred)
Category: Software Development/ Engineering
Shift: Regular / Client-aligned
Main location: India, Karnataka, Bangalore
Employment Type: Full Time
#LI-SB15

Education Qualification: Bachelor's degree in Computer Science, Information Security, or related field. Advanced certifications (CISSP, CISM, CEH) preferred.

Position Description: We are seeking a passionate and experienced Security Expert to join our Hotscan team. The ideal candidate will have a strong background in information security practices, risk management, and security governance. This role requires the ability to design, implement, and monitor security practices that align with industry standards and organizational goals.

Your future duties and responsibilities
Responsibilities:
- Monitor the security quality of the HS360 program.
- Develop security threat models to proactively assess potential risks.
- Monitor vulnerabilities and track security findings across the industry.
- Prioritize findings for project management and governance alignment.
- Identify risk issues, build business cases for remediation plans, and align with the product roadmap.
- Track progress and ensure timely resolution of identified security issues.
- Define and document secure coding practices for development teams.
- Prepare and lead security training sessions for developers and stakeholders.
- Provide advice on security toolsets and measures to strengthen the program's security posture.
Must-Have Skills:
- Strong knowledge of information security principles and practices.
- Hands-on experience with vulnerability management, risk analysis, and threat modeling.
- Excellent understanding of secure coding practices.
- Strong communication and presentation skills for conducting security training.
- Experience in preparing business cases for remediation and aligning with governance frameworks.

Required qualifications to be successful in this role
Good-to-Have Skills:
- Certifications such as CISSP, CISM, CEH, or equivalent.
- Experience working with financial products or AML systems.
- Familiarity with cloud security practices (AWS/Azure/GCP).
- Knowledge of security toolsets such as SIEM, vulnerability scanners, and penetration testing frameworks.
CGI is an equal opportunity employer. In addition, CGI is committed to providing accommodation for people with disabilities in accordance with provincial legislation. Please let us know if you require reasonable accommodation due to a disability during any aspect of the recruitment process and we will work with you to address your needs.

Role & responsibilities

Preferred candidate profile