GRC Analyst

UST is looking for Information Security Analyst with below requirements, Operational Support: o Coordinate with technology factory teams for assessment as per BAU process o Work with Technology Asset Owners (TAOs) to assess and implement relevant BAU process for Control Factory Candidates o Perform Assessments to determine security risks/ non-compliance as per the SOP manuals o Work with the team concerned and follow through remediation o Tracking and progress reporting o Perform periodic assessments to ensure compliance proactively Skill Set Requirements: Role: Control Factory

• Information Security Analyst Skills & Background: o Minimum 5-10 years of relevant industry experience in any technology risk management (TRM), IT audit and/or cyber/information security functions o Ability to understand and operate documented process for IT compliance, audit and regulatory requests o Knowhow and understanding in one or more areas of technology risk management principles, internal control concepts, cyber/information security controls, and industry frameworks o Follow documented process to maintain BAU operations o Communication Results to stakeholders o Analyze Deviations and prepare remediation plan along the documented procedures o Be able to understand controls, develop inventory, assess applications against controls o Be able to work with stakeholders in remediation activities o Ability to manage JIRA workflow tickets for BAU process o Prepare & maintain knowledge base in Confluence/Collaborate o Identify areas of automation/innovation and efficiencies to enhance the BAU operation and stakeholder experience o Functional knowledge of operating systems (Windows/Unix), databases, networks and components like system IDs, system resources, firewalls, LDAP, AD, Cloud o Functional knowledge of applications (authentication, authorization, interfaces, APIs), logging and monitoring o Functional knowledge of application design and architecture o Functional knowledge of application criticality, availability and data classification o Able to learn new skills with training and self-study o Any relevant experience in Project Management is desirable. Tools o JIRA, Confluence, Service. Now and/ or Archer. o MS Office (Word/Excel/Visio), PDF and PowerPoint.

Education

and Certifications o Degree or diploma in IT or technology stream o Any industry recognized IT certifications (Microsoft, Cloud, IT Security etc)