Sr.Analyst - IS Risk Management Assurance (L09)
Synchrony (company site, opens in a new tab)4+ yrsHyderabadOn-siteDirect career pageEst. 8–14 LPA
Posted 12h ago
Reach people at Synchrony
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Synchrony you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Provide oversight and ensure information security controls meet legal, regulatory, policy, standards, and security requirements.
- Participate in audits, reviews, and assessments including NIST, PCI-DSS, SOX 404 to ensure compliance with multiple standards and frameworks.
- Collaborate with clients and internal teams to respond to security assessments, manage risk & control self-assessments (RCSA), support third-party risk management and maintain security posture monitoring tools.
Minimum Requirements
- Bachelor’s Degree in Computer Engineering or related field with minimum 2 years experience in Information Security OR minimum 4 years experience in Information Security if degree not held.
- Minimum 2 years experience conducting security risk assessments.
- Good understanding of IS Risk Management concepts and IT US Banking regulations & industry best practices (IT SOX 404, NIST, PCI DSS, HIPAA).
- Work Timings: 5:00 AM to 2:00 PM EST.
Ideal Candidate Profile
- Experienced with security risk assessments and audits aligned to regulatory frameworks such as NIST, PCI-DSS, SOX 404.
- Comfortable collaborating with clients and multi-disciplinary internal teams to manage information security assurance and risk documentation.
- Familiarity with cloud security concepts and tools related to third party risk assessment (e.g., SIG, UpGuard, Process Unity).