GURUGRAM · FULLTIME
Sr Manager - Vendor Security Risk
SBI Cards & Payment Services
Gurugram · onsite · Posted 4d ago
Sourced from
Undisclosed8–13 yrsfulltimeGurugram
Your match
?
Sign in to see your match score, skill gaps & tailored resume.
Section · 01
About this role
About Us
What s in it for YOU
- SBI Card truly lives by the work-life balance philosophy. We offer a robust wellness and wellbeing program to support mental and physical health of our employees
- Admirable work deserves to be rewarded. We have a well curated bouquet of rewards and recognition program for the employees
- Dynamic, Inclusive and Diverse team culture
- Gender Neutral Policy
- Inclusive Health Benefits for all - Medical Insurance, Personal Accidental, Group Term Life Insurance and Annual Health Checkup, Dental and OPD benefits
- Commitment to the overall development of an employee through comprehensive learning & development framework
Role Purpose
Responsible for conducting vendor risk assessments from information security perspective based on, ISO27001:2013, PCI-DSS, Cloud security control framework etc. and to ensure identified risks are addressed appropriately in timely manner. The role is also responsible for assessing and identifying risks associated with third parties part of SBI Card extended echo system, analyzing identified risks and ensure timely reporting and remediation of the same and working closely with cross-functional teams within SBI Card and vendor /partner teams to manage security risks associated with third parties and get the same addressed within a agreed timeline.
Role Accountability
- Conduct vendor risk assessments from information security perspective using, ISO27001:2013, PCI-DSS, Cloud security control framework etc.
- Ensure identified risks are addressed appropriately
- Track and report status of open observations, remedial plan and timelines for resolution
- Perform remediation testing once identified observations have been marked as resolved
- Review and establish secure processes and systems at vendors end for integration with SBI Card
- Prepare and update assessment questionaries basis various applicable standards and industry good practices such as ISO 27001, PCI-DSS etc.
- Monitor vendor compliance, undertake vendor evaluations based on various industry standard and regulatory compliance perspective and suggest feedback / recommendations to the - business / vendor for mitigating identified risk
- Work with appropriate business users to ensure that for any identified risk require mitigating action along with timeline is agreed and tracked the same for successful closure
- Act as a subject matter expert to assist the business in identifying and mitigating risks pertaining to their vendor relationships
- Deliver continuous training and awareness to Business partners on various compliance requirements such as ISO 27001, PCI-DSS etc.
- Perform process documentation and compliance adherence
Measures of Success
- Number of vendor risk assessments conducted successfully
- Timely and accurate identification and reporting of information security risks pertaining to third parties/vendors
- Timely and accurate delivery of updates, presentations, assessment reports etc. to relevant stakeholders
- Tracking of audit findings and driving to closure within defined timelines
- Process Adherence as per MOU
Technical Skills / Experience / Certifications
- Knowledge in multiple information security technologies and their strengths and shortcomings
- Knowledge of common assessment control techniques
- Understanding of security controls from people, process and technology perspective
- Understanding of security architectural principles and standards
- Experience in system security, network security and information security, control objectives part of ISMS, Technology risk and compliance, BCP & DR planning, Security operations and Cloud security
- Knowledge of standard security processes and guidelines
- Experience in implementing or accessing compliance against PCI-DSS, ISO27001 requirements
- Industry-standard certifications such as ISO27001:2013 LA, CISA, CISM, Cloud Security etc.
Competencies critical to the role
- Detail Orientation
- Process Orientation
- Stakeholder Management
- Analytical ability
Qualification
Bachelor s Degree in Computer Science / Information Security or any other relevant discipline
Preferred Industry
FSI
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Let the agent run this one for you.
Tailored resume, auto-apply, and referral lookup — in under 2 minutes.
Section · 02
Skills
process documentationCismsecurity operationsCisaIso 27001Dsssecurity controlsDentalISMSNetwork SecurityEchomedical insuranceopdcloudRegulatory ComplianceCloud SecurityInformation Securityoperationscompliance
Section · Company
About SBI Cards & Payment Services
SBI Cards & Payment Services
Financial Services
3.8k+
employees
1998
28 years old
Gurgaon/Gurugram, Haryana
India
₹4.6L PA avg
Avg at SBI Cards & Payment Services
About
Plastic money for utilities and payments
Industries
Financial Services
Employee ratings
10 reviews
3.7/ 5
Culture
2.5
Career growth
1.7
Work-life
2.5
Employees rate it well for
Overall Company37Skill Development36
Find them on