Senior Corporate Security Analyst
- Toast
- 6 - 10 years
- Bengaluru
- 3 months ago
- Email to a friend
- Report this job
Job Description
- Conduct security risk assessments for vendors (onboarding and annual), review their security reports (SOC2), and continuously monitor their security posture.
- Perform risk scoring, provide security recommendations, track and respond to security breaches involving vendors, and oversee the remediation of third-party vulnerabilities.
- Drive Security Improvement Initiatives: Coordinate with procurement teams, GRC team and other stakeholders to enhance the overall security related to third-party risks.
- Supervise the deployment and operation of tools designed to identify installed software on endpoints and conduct comprehensive risk assessments of non-approved software.
- Liaise with Technical Governance for compliance oversight and action, facilitating the resolution of alerts, user account validations, and application misconfigurations.
- Develop and manage programs to conduct quarterly assessments of high/critical application vulnerabilities identified by Crowdstrike and all Chrome extensions utilized by Toasters, evaluating their actual risk.
- Oversee the initiation and implementation of organization-wide security awareness training programs.
- Engage in collaborative efforts with internal teams and external vendors to develop and deliver comprehensive training content.
- Administer phishing simulations for all employees.
- Proactively identify opportunities within G-Suite to strengthen the security posture and provide comprehensive security recommendations to the IT Operations Team for implementation.
- Investigate and propose Data Loss Prevention functionalities across key Toast data exchange platforms (e.g., Google Workspace, Slack).
- Collaborate with the multiple stakeholders to precisely delineate responsibilities and identify tasks for the Corporate Security team, thereby precluding operational redundancies.
- Review and update policies, Standard Operating Procedures (SOPs), and runbooks in coordination with the Technical Governance team.
- Demonstrated proficiency in the utilization of Identity and Access Management tools (Okta, BeyondTrust) to ensure secure access and authentication, and privileged access management.
- Possesses expertise in the BeyondCorp (Zero Trust) security model and its implementation for perimeterless security.
- Adept in patch management, encompassing processes, tools, and the timely application of security updates.
- Proactively identify opportunities to reduce manual effort through process automation and the strategic implementation of AI tools within security operations.
Job Classification
Industry: Software ProductFunctional Area / Department: IT & Information SecurityRole Category: IT & Information Security - OtherRole: IT & Information Security - OtherEmployement Type: Full timeContact Details:
Company: ToastLocation(s): Bengaluru
Keyskills: Procurement Patch management Computer science Assurance Simulation Access management Information security SOC IT operations Security operations
Similar positions
Toast
Toast, Inc. is a cloud-based restaurant management software company founded in 2012, offering an Android-based point of sale (POS) system for restaurants and bars. The company went public in 2021 and is valued at around $20 billion. Toast is used in approximately 120,000 US restaurants and expande...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in