Executing IT risk assessment reviews, identifying controls gaps and working in collaboration with subject matter experts to devise appropriate mitigation plans.- Identifying key risk trends, issues and other insights requiring further investigation and following up with Technology as appropriate.- Hands-on experience in penetration testing and tools like AppScan, Webinspect, Fortify, AppSpider, BurpSuite, Qualys, Checkmarx, Coverity.- Well-versed in conducting Security Review, Assessments and providing recommendations.- Experience in Process Improvement, Controls Enhancement and Reporting.- Engaging with organization wide risk and control groups, including internal audit and territory control teams.- Working with Technology stakeholders (including Production Support and Development teams) to identify the IT risks affecting the organization and formulating appropriate remediation strategies based on full understanding of business exposure and compensating controls.Excellent understanding of development security and its implementation in systems : identification, authentication, access control and provisioning, alignment of jurisdiction to business process.- Knowledge of single-sign-on security strategies (e.g. Familiarity with common security vulnerabilities (e.g. Excellent knowledge of programming best practices, design patterns, etc.- Excellent problem solving skills, being able to develop approaches to complex technology and strategy problems,



building consensus across diverse interest groups and working within constraints of practical delivery yet able to think beyond the requirements of immediate issues.- Target audiences will include regulatory authorities and internal/external auditors.Technical & Behavioral Competencies : - Excellent knowledge of programming best practices, design patterns, etc.- Excellent problem solving skills, being able to develop approaches to complex technology and strategy problems, building consensus across diverse interest groups and working within constraints of practical delivery yet able to think beyond the requirements of immediate issues.- Target audiences will include regulatory authorities and internal/external auditors.- Hands-on experience in penetration testing and tools like AppScan, Webinspect, Fortify, AppSpider, BurpSuite, Qualys, Checkmarx, Coverity, Sonatype, Blackduck.- Well-versed in conducting Security Review, Assessments and providing recommendations.- Knowledge of OWASP, LLM, AI NIST framework, SANS standards.- Valuable to have knowledge on Automation, PowerBI, JIRA, python scripting.- Experience in Process Improvement, Controls Enhancement and Reporting.- Clear understanding of application and data security.- Must be flexible, independent, self-motivated.- Technical Graduate (Computer Science) Preferable.Ability to develop and leverage networks.- Education Level : - Bachelor Degree or equivalent.Experience Level : - Experience 5 - 7 years.Other/Specific Qualifications : - 4+ years of Application security experience. (

📌 Security Specialist - Cyber Security (Bengaluru)
🏢 BNP Paribas India Solutions
📍 Bengaluru