Cyber Security Lead Analyst

Within Societe Generale Global Solution Center (SGGSC), you will join the Information Security & Risk (ISR) team based out of Bengaluru, as Cyber Security Senior analyst contributing to the information security and risk management practice. 

As a Cybersecurity Consultant, you will be part of the SG Group’s MIBS (Mobility International Retail Banking and Financial Services) division. 

Based in Bangalore, you will manage infosec operations and responsibilities across regions and collaborate closely with security and IT Support teams of AYVENS division to coordinate cybersecurity operations, governance activities, manage compliance efforts, and support audit readiness. 

You will play a vital role in presenting evidence to stakeholders, identifying risks, implementing security controls, conducting risk awareness & training staff in line with organizational and regulatory expectations.

The role involves working in a fast‑paced, high‑pressure environment that requires assertiveness, flexibility, and the ability to meet deadlines based on defined milestones.

The main responsibilities in the role are:

• Compliance: Ensure compliance with relevant external regulations and internal standards, such as GDPR, ISO 27001, and others. 

• Govern and oversee GDPR / AAS / DORA / SCHREMS compliance for Application Security and Third-Party Risk Management 

• Monitor ITRM KRIs and deliver remediation plans 

• Ensure availability and maintenance of NIST control evidence.. 

• Develop, implement, and manage comprehensive security compliance programs. 

• Policy Development: Create and enforce security policies, procedures, and guidelines to maintain compliance. 

• Audit and Assessment: Collaborate to conduct regular audits and assessments to identify compliance gaps and ensure adherence to security standards.  

• Risk Management: Identify, assess, and mitigate compliance risks to the organization. 

• Deliver Risk analysis on Business request (new apps, new projects, new vendors…) 

• Ensure Risk Acceptances are registered and follow-up actions are tracked to closure. 

• Lead Security exception Validation. 

• Conduct awareness sessions to LOD1 Infosec team on Risk Management 

• RFP Support 

• Respond to customer security questionnaires and review security clauses. 

• Incident Response: Lead the response to security incidents, ensuring proper documentation and resolution in line with compliance requirements. 

• Training and Awareness: Develop and deliver training programs to increase awareness of security compliance across the organization. 

• Design, launch and reporting of phishing campaigns and conduct awareness sessions. 

• Monitoring and Reporting: Monitor IT systems for potential risks and vulnerabilities and provide regular reports to senior management. 

• Responsible of internal/external audit monitoring and reporting – global CISO ownership. 

• Ensure the follow-up of audit recommendations (Inspection, external auditors, regulators, etc.). 

• Monitor and coordinate the timely closure of audit recommendations. 

• Work closely with IT, legal, and business teams to integrate compliance requirements into business processes. 

Technical Skills:

• Knowledge of Microsoft Defender Phishing Module or on similar platform.

• Proficiency in MS Office, particularly MS Excel and PowerPoint.

• AI LLM proficiency with prompting knowledge

Behavioral Skills on the job:

• Strong understanding of security awareness, incident‑management, and crisis‑management principles.

• Proactive communication, presentation, and stakeholder‑management skills.

• Proven leadership and project‑management abilities.

• Ability to work independently and make effective decisions under pressure.

• Strong organizational, analytical, presentation, and reporting skills.

• Capacity to challenge local stakeholders’ arguments and action plans.

• Excellent organizational and cross‑functional coordination skills.

• Strong adaptability, openness to feedback, and willingness to continuously learn.

• Results‑driven mindset with strong planning and execution discipline.

Qualifications:

• Bachelor’s or master’s degree preferred.

• Relevant certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Lead Auditor, CompTIA Security+, etc.

• At least 5 years of work experience in Cybersecurity operations (Data security, Network security, IAM).

• Strong knowledge of information‑security and monitoring frameworks.

• Experience conducting independent research and identifying technical security gaps.

• Intermediate‑level proficiency in Microsoft Excel.

• Strong English proficiency (spoken, written, and reading).

• Ayvens InfoSec, LOD1, and LOD2 Teams.

• Resource people & asset managers and Support teams.