USGT Digital is Looking for Analyst II Information Security Full Time

JOB DESCRIPTION

Role Proficiency:Under guidance and support from the supervisors carry out cross domain tasks assigned (including internal and external audits customer assurance awareness training VAPT Red Teaming etc.) with better knowledge and competence (Maximum supervision)

Outcomes:

1. Handle the assigned tasks from the allocated domain with guidance from the leads. (Domain Examples: BCMS Risk assessment Incident management HITRUST SOC Customer Assurance Awareness activities Data Privacy VAPT Red Teaming etc.)
2. Assist leads in internal/external audits to ensure compliance with ISO 27001/ISO 22301/ISO 27701 requirement as well as business specific requirements.
3. Responsible for the internal audits/security assessments report preparation and follow up for closure of respective audit reports.
4. Understand and Evaluate IT Controls and assist in Risk Assessment
5. Tracking and following up for the Risk closure.
6. Learn and understand existing and emerging management practices and link with security control points with guidance from the leads.
7. Handle preparatory sessions and evidence collections from all applicable teams as part of any external audits with minimum guidance from the leads.
8. Comfortable with CTFs or Bug Bounty activities.
9. Assist the leads in customer discussions to clearly identify/document the requirement.
10. Perform security assessments and assist in preparing comprehensive technical reports for the assessments within stipulated time.
11. Involve in the automation activities within the team.
12. Contribute to infosec awareness activities with support from leads.
13. Assist in establishing a tracking and reporting strategy.

Measures of Outcomes:

1. Number of internal audits attended or security assessments been a part of
2. Adherence to applicable SLAs
3. Number of areas of responsibility on cross domains.
4. Less than two stake holder escalations
5. More than two appreciation from the stakeholders/leads.

Outputs Expected:Documentation:

1. Policy and Procedure amendments
   Awareness training materials
   Presentations decks for internal/ external discussions
   Audit / Security Assessment reports

Process:

1. Internal ISMS audits – assisting in audits
   prepare audit reports and follow-up for the audit report closure
2. Compliance Audits – Assisting certification audits
   conduct preparatory session and evidence collection
3. Infosec activities – training material
   conducting sessions
   co-ordinate with other teams for trainings conducting
4. Customer Assurance – assist in evidence collection
5. Vulnerability Assessment and Penetration Testing/Red Teaming Activities
6. CM activities
7. Assisting the leads in executing other location responsibilities.

Training or certifications:

1. 5 per year (1 certification and minimum 4 of UST trainings related to Information/Cyber Security domains)

Skill Examples:

1. Ability to understand prioritize and escalate tasks to resolve issues quickly and make decisions.
2. Strong Excel and Dashboard skills
3. Good Presentation and communication skills
4. Excellent verbal and written communication skills required including the ability to effectively communicate in both highly technical and non-technical environments.
5. Detail oriented customer oriented result delivery oriented analytical thinking
6. Good at working in a team and with other teams
7. A great problem solver with the knack of coaching others to do the same
8. Good time management
9. Self-motivated and enthusiastic
10. A desire for continuous learning and skill development.

Knowledge Examples:

Additional Comments:
The End User Services of Strategic Tech Enablement (aka STE) team focuses on providing services & operations support for Providence, India applications, portals, services, and platforms spanning across various technical stacks and supporting multiple business process ticket management for both Clinical and Non-Clinical Services. Our Team culture: Work environment, which is collaborative and driven by Learning, Attention to details & Empathy towards customer Empowering & Enabling individuals and teams to realize their full potential. Focus on outcomes, solving our users pain points & predictable delivery Data driven decision making on vision & roadmap of Service Operations & Customer Service Support. About the Role – Senior Service Analyst – Deskside Support: This is a critical End User Services execution for the Desktop Support Team at Providence India. The scope is breadth focused across Providence and deep, in terms of technical, process, operational, and continuous improvement required to support multiple enterprise wide IS services. The Analyst / Desktop Support Engineer requires to manage the local IT hardware, Local Network, and application services support, to maintain the rhythm of IS Services. This role will work in a fast-paced environment, have constant demands for better services, and will require strong problem resolution, decision making, communication and partnering skills. What will you be responsible for: The ideal candidate will have a blend of technical, process & operational skills in End User Service – Desktop Support Management, Operations, Customer Interactions, Field Support. Candidate should be adept at applying her/ his experience with a focus on problem solving, supporting systems, operational excellence, service quality, reduction of manual toil with focus on User experience. Candidate should be highly collaborative and has good working experience in Global operating setups. Customer Service: Personal responsibility for customer satisfaction. Professionally represents the Face and Voice of IT in difficult situations, consistently strives to listen, understand, and support the needs of others in a sensitive manner. Quality: Performs challenging tasks efficiently and effectively. Anticipates problems and takes corrective action prior to completing the task. Sets challenging objectives and works against self-defined standards of excellence to continually improve personal performance. Problem Solving: Strong attention to detail and outstanding analytical skills. Collaboration: Ability to work effectively to build relationships with colleagues, customers, and management through positive interaction. Flexibility and response to change: Proven ability to organize multiple efforts and to respond to shifting priorities. Demonstrated ability to study, understand, adapt, and respond effectively to a constantly changing environment. Communications: Listens with sensitivity and openness. Actively seeks constructive feedback and remains open and receptive to it. Anticipates the information needs of others. Proven skills in communicating with clinical and technical customers. What would your day look like Desktop PC and Notebook Warranty/Non-Warranty Repairs – Supplier shall manage equipment repair within the terms of the Microsoft OEM warranties, facilitating 3rd Party repair where Supplier does not perform break-fix and coordinate PC loaners and spare parts as part of break-fix support PC Hardware and Peripherals Installation and Configuration – Install Client PC hardware/peripherals and mobile devices, assisting with configuration, verifying network connectivity, ability to print, access to email Client Data Backup – Assist Client with backup and transfer of data as part of break-fix or new PC set-up in accordance with the Procedures Manual. Software Installation and Support – Install standard CSE global image of n and n-1 operating systems and Microsoft Office/Approved applications. Troubleshoot and resolve Desktop/Notebook software issues for n and n-1 operating systems used at Microsoft and for Microsoft approved applications. Support deployment of upgrade/new versions of OS and Microsoft Office Network Connectivity Support – Troubleshoot and resolve network connectivity issues as required per defined processes. Provide remote access support, Smart Card support, Phone enrolment setup and troubleshooting Printer Support – Verify device connectivity, complete general Tier 1 troubleshooting on corporate printers Setting up accounts for new users, Analyst should be able to test the new applications and technologies. If required, he should be able to train the new joiners in the team. Follow defined processes when handling incidents and service requests in a professional manner using approved tools. Ensure production solutions are reliable, secure, and effective and that implemented solutions are continuously monitored and document