Log In
Sign Up
Private Jobs / Private Sector
Shell Hiring for Risk and Control Advisor at Bangalore Full Time
br{display:none;}.css-58vpdc ul > li{margin-left:0;}.css-58vpdc li{padding:0;}]]>
The Role
The Security & Controls Analyst will be required to work primarily on designing, documenting, improving and implementing controls within the landscape. This requires a thorough knowledge of the system and application architecture, data flows and support processes used. Much of this knowledge will need to be gained through interaction with the relevant teams e.g. architects, risk analysts, and technical staff.
Correctly interpret control objectives from the IT Control Framework. Translate control objectives into working control procedures (swim-lane diagrams, work instructions, job aids, etc.) Design and implement fit for purpose control procedures taking into account ITIL procedures used by the support organization. Write test scripts to enable independent and objective testing of controls. Where required, execute controls for systems in the non-production environments. Monitor control execution, ensuring all relevant evidence is correctly labelled and stored. Respond to queries raised by IRM/internal/external audit. Provide advice, guidance, consultancy on security related issues. Participate in and follow up on security incidents where required.
Translated Company Description
Accoutabilities:
Project Review and Technical Advice
- Review all new projects; new technical designs; for Information risks and advise on suitable controls and mitigations at early stages of the program.
- Lead for specific technology and advice on the Information security for their projects.
- Offer advice to Shell and suppliers to assist in resolving questions and issues around how to manage risk
- Provide Subject Matter Expertise for projects and business stakeholders, in combination with the Improvement Program.
- Work with the architecture community to review new technology and architecture innovations.
The Security & Compliance (S&C) Competency Centre (CC) team is responsible for supporting the following:
Risk Management and Mitigation
- Assess and classify all potential business and infrastructure information risks.
- Execute, with suppliers, risk analyses on IT application/services.
- Develop and socialize our overall risk profile and action plans to mitigate risks
- Facilitate smooth conduct of Risk Assessment (including Legal & Regulatory) on Applications, Network& Systems
- Perform end to end Security Assessment on vendor offerings – New/Leveraging existing (SAAS / PAAS/IAAS) services including integration with Shell environment.
- Translate Technical, legal and Regulatory Compliance obligations into a cohesive collection of Security Controls and provides the respective stakeholders with the IRM requirements and its implementation methodologies.
- Actively participate in S&C team and community meetings, representing S&C and Business interests in other CC forums.
- Support during Internal /External Audit
- Ensure that S&C continues to focus on risks significant to the Business, with emphasis on innovation.
Controls Management and Optimization
- Ensure controls are both risk-driven and based on industry standards
- Review and approve the control design of supplier and Shell technical specifications against Shells control requirements, as agreed contractually, during PDF project.
- Support the development of new IRM policies, tooling, procedures where required.
Disclaimer
Please note: We occasionally amend or withdraw Shell jobs and reserve the right to do so at any time, including prior to the advertised closing date. Before applying, you are advised to read our data protection policy. This policy describes the processing that may be associated with your personal data and informs you that your personal data may be transferred to Royal Dutch/Shell Group companies around the world. The Shell Group and its approved recruitment consultants will never ask you for a fee to process or consider your application for a career with Shell. Anyone who demands such a fee is not an authorised Shell representative and you are strongly advised to refuse any such demand. Shell is an Equal Opportunity Employer.