Senior Corporate Security Analyst
- Toast
- 6 - 10 years
- Bengaluru
- 5 months ago
- Email to a friend
- Report this job
Job Description
- Conduct security risk assessments for vendors (onboarding and annual), review their security reports (SOC2), and continuously monitor their security posture.
- Perform risk scoring, provide security recommendations, track and respond to security breaches involving vendors, and oversee the remediation of third-party vulnerabilities.
- Drive Security Improvement Initiatives: Coordinate with procurement teams, GRC team and other stakeholders to enhance the overall security related to third-party risks.
- Supervise the deployment and operation of tools designed to identify installed software on endpoints and conduct comprehensive risk assessments of non-approved software.
- Liaise with Technical Governance for compliance oversight and action, facilitating the resolution of alerts, user account validations, and application misconfigurations.
- Develop and manage programs to conduct quarterly assessments of high/critical application vulnerabilities identified by Crowdstrike and all Chrome extensions utilized by Toasters, evaluating their actual risk.
- Oversee the initiation and implementation of organization-wide security awareness training programs.
- Engage in collaborative efforts with internal teams and external vendors to develop and deliver comprehensive training content.
- Administer phishing simulations for all employees.
- Proactively identify opportunities within G-Suite to strengthen the security posture and provide comprehensive security recommendations to the IT Operations Team for implementation.
- Investigate and propose Data Loss Prevention functionalities across key Toast data exchange platforms (e.g., Google Workspace, Slack).
- Collaborate with the multiple stakeholders to precisely delineate responsibilities and identify tasks for the Corporate Security team, thereby precluding operational redundancies.
- Review and update policies, Standard Operating Procedures (SOPs), and runbooks in coordination with the Technical Governance team.
- Demonstrated proficiency in the utilization of Identity and Access Management tools (Okta, BeyondTrust) to ensure secure access and authentication, and privileged access management.
- Possesses expertise in the BeyondCorp (Zero Trust) security model and its implementation for perimeterless security.
- Adept in patch management, encompassing processes, tools, and the timely application of security updates.
- Proactively identify opportunities to reduce manual effort through process automation and the strategic implementation of AI tools within security operations.
Job Classification
Industry: Software ProductFunctional Area / Department: IT & Information SecurityRole Category: IT & Information Security - OtherRole: IT & Information Security - OtherEmployement Type: Full timeContact Details:
Company: ToastLocation(s): Bengaluru
Keyskills: Procurement Patch management Computer science Assurance Simulation Access management Information security SOC IT operations Security operations
Similar positions
Toast
Toast empowers restaurants of all sizes to build great teams, increase revenue, improve operations, and delight guests. We pair our deep understanding of the restaurant industry with powerful cloud based software and restaurant-grade hardware to deliver an intuitive, all-in-one platform, across poin...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in