Cybersecurity Engineer - Business Analyst

Location(s):

• Tower -11, (IT/ITES) SEZ of M/s Gurugram Infospace Ltd, Vill. Dundahera, Sector-21, Gurugram, Haryana, Gurugram, Haryana, 122016, IN
  
  

Line Of Business: CYBERSECURITY(CSG)

Job Category:

• Engineering & Technology
  
  

Experience Level: Experienced Hire

At Moody's, we unite the brightest minds to turn today’s risks into tomorrow’s opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are-with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways.

If you are excited about this opportunity but do not meet every single requirement, please apply! You still may be a great fit for this role or other open roles. We are seeking candidates who model our values: invest in every relationship, lead with curiosity, champion diverse perspectives, turn inputs into actions, and uphold trust through integrity.

Skills and Competencies

• Ability to operate within a high performing, motivated team, and adapt direction to accommodate changes in priorities.
• Knowledge of and experience with current and emerging access management technologies including IAM and Privileged Access Management tools (Sailpoint), File Share Access Auditing (Varonis), Hitachi ID (HIPAM) and Active Directory (AD), JIRA, PowerBi
• Strong knowledge of Access Management business processes/workflows, and associated tools (Service Now).
• Build RCA on repetitive errors and suggest a plan to mitigate.
• General knowledge of best practice standards that govern Information Security such as ISO, NIST and SANS.
• Strong written and oral communication skills including the ability to interact directly with customers that do not have an IT background.
• Proven ability to work within a large enterprise that spans multiple continents, is governed by change management and has a tiered support model.
  
  

Qualifications

• Minimum of 2-3 years of experience with access administration
• BS or BA degree, preferably in technology/business or equivalent.
• General understanding of Identity Management (IDM) and security concepts.
• Hands-on knowledge on tools like active directory, IDAM, Microsoft exchange, Varonis etc.
• Practical knowledge and experience with Identity Management technologies.
• General understanding of Role Based Access Control, Governance and Access Certification in Sailpoint.
• General understand of PDLC, ITIL processes.
• Excellent analytical and problem solving skills required.
• Excellent verbal and written communication skills.
• Relevant certifications such as ITIL, PMP.
  
  

Responsibilities

The CyberSecurity Engineer - Business Analyst will serve as a functional subject matter expert and customer liaison for the Identity and Access Management (IAM) platform solutions.

• Should have good Hands-on experience on access management tools like Active Directory, Microsoft Exchange, IDAM etc.
• Ability to capture business requirements and define specifications.
• Ability to perform requirements fit/gap analysis.
• Knowledge and proficiency in business process optimization
• Experience in oversight, governance and operations of all aspects of access management.
• Demonstrated knowledge and understanding of User provisioning for different accounts - Created and managed user accounts in Active Directory and various customized applications used by end users for regular day to day activity.
• Demonstrated Good knowledge on ITIL process and should be well versed with incident and request management.
• Knowledge and proficiency in troubleshooting application problems/issues (from a functional perspective).
• Ability to guide/train application users in the use of application features, functions and best practices..
• Should be able to develop and improve Standard Operating Procedures according to the requirement.
• Should be able to assist management with monitoring systems and networks by reporting incidents and anomalies to appropriate security and client staff and management.
• Should be able to develop and improve Standard Operating Procedures according to the requirement.
  
  

About The Team

The Cybersecurity team is responsible for helping the organization balance risk by aligning policies and procedures with Moody’s business requirements. The team has global responsibility for the development, enforcement and monitoring of security controls, policies and procedures, and for the delivery of security services. The Information Risk and Security team sets strategic direction for security within the organization and aligns with stakeholders throughout the company. The team is responsible for key programs including Information Risk and Security Operations, Engineering, Patch and Vulnerability Management, Data Loss Prevention, Access Control, Threat Management, Security Monitoring and Incident Response.

Moody’s is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender expression, gender identity or any other characteristic protected by law.

Candidates for Moody's Corporation may be asked to disclose securities holdings pursuant to Moody’s Policy for Securities Trading and the requirements of the position. Employment is contingent upon compliance with the Policy, including remediation of positions in those holdings as necessary.