Cybersecurity Control Testing & CRI Maturity Assessor - AVP
BengaluruFull-time3–5 yrsPosted over a month ago
Mid-level cybersecurity role at MUFG Global Service in Bengaluru. Needs 3–5 years and a B.Tech, B.E. or B.Sc.
About the role
This role is a member of the CISO of America’s team within the Cybersecurity GRC function and is responsible for executing independent control testing, control assessments, and validation activities across both on-premises and cloud environments.
What you'll do
- Control Testing & Validation (On-Prem & Cloud): Test control design and operating effectiveness using evidence-based procedures (e.g., walkthroughs, inquiry, inspection
- CRI Profile Maturity Assessments: Perform CRI Profile maturity assessments by mapping controls to CRI requirements, evaluating evidence, determining maturity ratings
- Third-Party/Vendor Control Assessments: Conduct third-party/vendor cybersecurity assessments with a focus on validating control design and operating effectiveness…
- Assessment Documentation & Reporting: Produce high-quality assessment workpapers, test scripts, and written results that clearly describe scope, procedures performed
- Communicate results through formal reporting, including risk ratings, control gaps, and required remediation actions
What you need
- Vulnerability assessment
- Risk management
- Data privacy
- CI/CD
Good to have
- CISSP
- CISM
- CISA
- Cloud security