Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted yesterday

Sr.Analyst - IS Risk Management Assurance (L09)

synchronyfinancial51 open roles

Where
Hyderabad IN
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSr.Analyst - IS Risk Management Assurance (L09)synchronyfinancial · Hyderabad IN

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on synchronyfinancial's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market. synchronyfinancial postings stay open a median of 7 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: posted yesterday

synchronyfinancial median: 7 days open

The posting

Job Description:

Role Title: Sr.Analyst - IS Risk Management Assurance - Analyst (L09)

Company Overview:

Synchrony (NYSE: SYF) is a leading consumer financing company that has been at the heart of American commerce and opportunity for nearly a century. Synchrony delivers credit and banking products that empower tens of millions of consumers to improve their financial lives and access what matters most. Leveraging innovative solutions that are shaping the future of retail commerce, Synchrony supports the growth and success of some of the nation’s most respected brands, alongside hundreds of thousands of small and midsize businesses, including health and wellness providers. Committed to excellence in service and culture, Synchrony is proud to be named as #3 as a Great Place to Work® in India and is honored to be ranked the #1 Best Company to Work For® in the U.S. by Fortune magazine and Great Place to Work®. For more information, visit www.synchrony.com.

Organizational Overview:

Synchrony’s Information Security Risk Management program’s mission is to protect and enable Synchrony's business by integrating security risk management into our Technology landscape by proactively addressing emerging risk themes. Members of this group would have diversified exposure to Assessments and Audits (PCI, HIPAA etc.), Issue Management, Third Party Risk Management.

Role Summary/Purpose:

This role would be supporting information security assurance function part of information security risk management. The role will provide oversight to ensure that controls are adequate to meet legal, regulatory, policy, standards, and security requirements. The role will also participate in audits, reviews, and assessments to ensure compliance with multiple compliance and regulatory standards and frameworks including, but not limited to NIST, PCI-DSS, SOX 404, etc

Key Responsibilities:

  • Collaborate with the team and collectively respond client information security assessments
  • Engage with clients to discuss assessment findings, address questions or concerns, and provide guidance and support during client assessment
  • Document client assessment responses to support processes and commonly asked questions
  • Document and respond to shared assessments SIG(Standardized Information Gathering) questionnaire for external client assessments
  • Familiarity with Information security policies, procedures and standards to support client assessments
  • Review and action alerts from Security Rating Tools used to monitor SYF security posture
  • Support identification of process improvements and implementation of changes
  • Maintain clear and open communication with key stakeholders throughout the assessment process, including client representatives and internal teams
  • Continuous Improvements: Obtain feedback from clients and internal teams to identify areas for process improvement, refine assessment methodologies, and enhance the quality and value of future client assessments
  • Perform RCSA (Risk & Control Self Assessments) against organization policies, standard controls and regulatory control frameworks
  • Work collaboratively with all teams in InfoSec to gather evidence from their processes in support of documenting and validating the assurance of RCSA controls
  • Report any control violation findings through organization risk management framework or model
  • Support administrative and maintenance tasks associated with GRC and SRS Tools(Black kite)
  • Evaluate and communicate security risks and solutions to business partners and IT management/staff
  • Support risk management special projects for Ex:External Outbound data etc.

Required Skills/Knowledge:

  • Bachelor’s Degree in Computer Engineering or related field, with a minimum of 2 years of experience in Information Security OR in lieu of the Bachelor's degree, a minimum of 4 years of experience in Information Security.
  • Minimum 2 years of experience conducting security risk assessments
  • Good understanding of IS Risk Management Concepts
  • Good understanding of IT related US Banking regulations & industry best practices (IT SOX 404, NIST, PCI DSS, HIPAA etc.)
  • Excellent interpersonal skills with ability to influence team members, management & external groups
  • Self-motivated & able to work independently or in a team environment & work with virtual teams
  • Good understanding of foundational cloud security concepts

Desired Skills/Knowledge:

  • In depth understanding of Information Security and Risk Management foundational concepts
  • Good understanding of data protection, Cloud and AI related concepts/technologies
  • Experience third party risk assessment tools and technologies such as SIG, UpGuard, Process Unity etc.

Eligibility Criteria:

  • Bachelor's degree in Information Security, Computer Science, or a related filed with minimum of 2 years of practical experience in Information Security and in lieu of Bachelor’s Degree minimum of 4 years of relevant experience.

Work Timings: 5:00 AM to 2:00 PM EST

For Internal Applicants:

  • Understand the criteria or mandatory skills required for the role, before applying
  • Inform your manager and HRM before applying for any role on Workday
  • Ensure that your professional profile is updated (fields such as education, prior experience, other skills) and it is mandatory to upload your updated resume (Word or PDF format)
  • Must not be any corrective action plan (First Formal/Final Formal, Lpp)
  • L4 to L7 Employees who have completed 12 months in the organization and 12 months in current role and level are only eligible.
  • L7+ Employees who have completed 18 months in the organization and 12 months in current role and level are only eligible.
  • L07+ Employees can apply

Job Family Group:

Information Technology

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against synchronyfinancial's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on synchronyfinancial's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    synchronyfinancial's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.