Senior Consultant - Security and Compliance

POSITION SUMMARY The Consultant is responsible for supporting the Consulting Services Team in delivering cybersecurity, privacy, and compliance services across a diverse portfolio of client engagements. This role operates as a flexible, deployable resource, contributing to multiple concurrent or sequential engagements based on business needs. This role requires proactive initiative to study, ask questions, and rapidly learn the organization’s solutions, methodologies, and delivery standards. Consultants must be comfortable transitioning between engagements, adapting quickly to new client environments, and delivering value immediately. Consultants focus on executing client deliverables, enhancing service quality, and improving project efficiency under the guidance of senior team members. They are expected to develop broad subject matter expertise, contribute to process improvements, and build trusted relationships across a variety of clients and internal teams. SPECIFIC JOB RESPONSIBILITIES Serve as a deployable consulting resource, supporting multiple client engagements across varying industries, with a focus on healthcare. Adapt quickly to new client environments, priorities, and team structures while maintaining high-quality delivery. Support the execution of cybersecurity and compliance consulting engagements under senior leadership guidance. Work closely with clients to collect data, conduct risk assessments, gap analyses, and document findings. Assist in evaluating client security postures, including vulnerability management, compliance alignment, and risk exposure. Develop and contribute to recommendations aligned with industry frameworks such as NIST, ISO 27001, CIS Controls, and HIPAA. Support clients in designing and implementing security controls, policies, and procedures.

Junior SOC 2 Type 2 Auditor Position Overview Clearwater is looking for a Junior SOC 2 Type 2 Auditor to support the planning, execution, and documentation of SOC 2 Type 2 audits. The role will work closely with internal teams, control owners, external auditors, and compliance stakeholders to assess the design and operating effectiveness of controls and ensure appropriate audit evidence is maintained. The ideal candidate should have good understanding of SOC 2, IT general controls, information security, risk management, and compliance frameworks , with strong attention to detail and documentation skills. Key Responsibilities Support SOC 2 Type 2 audit activities from planning through completion. Assist in reviewing and testing controls related to security, availability, confidentiality, processing integrity, and privacy, as applicable. Collect, organize, and validate audit evidence from control owners. Perform preliminary testing of controls for design and operating effectiveness under the supervision of senior auditors. Review evidence for completeness, accuracy, relevance, and appropriate audit periods. Identify control gaps, exceptions, and missing evidence and communicate them to relevant stakeholders. Maintain audit workpapers, testing documentation, evidence trackers, and issue logs. Follow up with control owners to obtain missing or updated evidence. Assist in preparing audit findings and documenting observations, exceptions, and remediation activities. Support management in tracking remediation plans and closure of identified control deficiencies. Participate in walkthroughs and discussions with IT, Security, Engineering, HR, Legal, Finance, and other business teams. Assist with maintaining SOC 2 policies, procedures, control descriptions, and supporting documentation. Stay current with SOC 2 requirements, security and compliance practices, and relevant industry standards. Required Qualifications Bachelor's degree in Infor

Position Overview: As a Delivery Analyst you are intense about technology and exceed all expectations with your clients, from deadlines to deliverables. This position is responsible for executing and delivering operations risk management solutions. This role is expected to be an expert in the Diligent Operational Risk Management solutions and collaborate with internal teams to get the job done. Key Responsibilities Utilize your product and domain expertise to deliver the customer requests and create a delightful customer experience. Responsible for the timely and quality delivery of the services requested by customers. Collaborate with Customer Success Managers, Senior Managers and Managers to ensure any new service requests are handled appropriately or routed the request to the correct teams. Document and maintain the standard operating procedures for performing the customer specific request. Consult with the global implementation teams and customer success teams to provide technical guidance to the customer to leverage more value from the product. Required Experience/Skills 2-5 years of experience in an internal or external client-facing or consulting role Ability to effectively engage customer personnel in solution discussions to resolve issues regarding compliance, vendor management, information security and/or risk management requirements and goals. Strong passion for Compliance, Vendor management, Information security and/or Risk management field. Ability to work as part of a team to deliver in tight timeframes and respond quickly in an ever-changing environment Experience in Microsoft Office especially using Microsoft Excel Undergraduate degree in a relevant area (e.g. Business Administration, Compliance Management, Legal & Ethics, Supply Chain Management, Engineering, Information Security or MIS) is a plus. Preferred Experience/Skills Amazing communication skills Demonstrate effective time management and ability to multi-task in a fast-

Job Title: DATA ARCHITECT About Us “Capco, a Wipro company, is a global technology and management consulting firm. Awarded with Consultancy of the year in the British Bank Award and has been ranked Top 100 Best Companies for Women in India 2022 by Avtar & Seramount . With our presence across 32 cities across globe, we support 100+ clients across banking, financial and Energy sectors. We are recognized for our deep transformation execution and delivery. WHY JOIN CAPCO? You will work on engaging projects with the largest international and local banks, insurance companies, payment service providers and other key players in the industry. The projects that will transform the financial services industry. MAKE AN IMPACT Innovative thinking, delivery excellence and thought leadership to help our clients transform their business. Together with our clients and industry partners, we deliver disruptive work that is changing energy and financial services. #BEYOURSELFATWORK Capco has a tolerant, open culture that values diversity, inclusivity, and creativity. CAREER ADVANCEMENT With no forced hierarchy at Capco, everyone has the opportunity to grow as we grow, taking their career into their own hands. DIVERSITY & INCLUSION We believe that diversity of people and perspective gives us a competitive advantage. Location - Bangalore, Pune, Hyderabad, Gurugram, Chennai, Mumbai Experience - 15+ Years Skills and Qualifications : Defines and drives enterprise data architecture strategy across the business unit. Leads Architectural thinking across transformation programmes, influences executive stakeholders, and embeds modern data practices and cloud technologies at scale. Key Responsibilities • Set strategic direction for data architecture across the relevant business unit. • Lead wide-scale adoption of modern data architectures (e.g. data mesh, data[1]as-a-product). • Architect and govern cloud data platforms, migration strategies, and cost[1] optimised solutions

Senior Consultant-We are seeking a seasoned ITES Solution Architect to lead the design and execution of enterprise-grade IT infrastructure projects. -"Key Responsibilities: Infrastructure Architecture & Design • Design and implement end-to-end IT infrastructure solutions including compute, storage, network, and security. • Architect high-availability systems with failover clustering, load balancing, and redundancy. • Define and implement disaster recovery strategies with clear RTO/RPO objectives. Data Center & DR Strategy • Design and manage primary and secondary data center environments. • Plan and execute DR site configurations, ensuring seamless failover and recovery. • Implement real-time or scheduled data synchronization between DC and DR using replication technologies (e.g., SAN replication, DFS-R, Veeam, Zerto). Backup & Recovery Planning • Develop and maintain enterprise backup strategies using tools like Commvault, Veeam, or NetBackup. • Ensure secure, encrypted backups with retentio

Junior Consultant – Vulnerability Assessment, Penetration Testing & Red Teaming Location: Clearwater Pune, WFO Experience: 1–3 years Employment Type: Full-time Department: Cybersecurity / Information Security Reporting To: Senior Consultant / Team Lead About the Role Clearwater is looking for a Junior Consultant – Vulnerability Assessment, Penetration Testing (VAPT) & Red Teaming to join our consulting services team. The role will support the delivery of vulnerability assessments, penetration testing, application and infrastructure security assessments, and red team engagements for clients across different technology environments. The ideal candidate should have a strong foundation in cybersecurity, networking, operating systems and common security testing methodologies, along with a willingness to continuously learn and develop offensive security skills. Key Responsibilities Vulnerability Assessment & Penetration Testing Assist in conducting vulnerability assessments and penetration tests across: Web applications and APIs Mobile applications Network and infrastructure environments Cloud environments Internal and external networks Wireless environments, where applicable Perform reconnaissance, enumeration, vulnerability identification and validation. Identify and safely validate security weaknesses using manual and automated techniques. Assist with exploitation and post-exploitation activities under approved engagement scopes. Conduct security testing in accordance with established methodologies such as OWASP, PTES and NIST, as applicable. Analyse scan results and distinguish genuine vulnerabilities from false positives. Red Teaming Support red team and adversary simulation engagements under the guidance of senior team members. Assist with reconnaissance, attack-path identification, initial access, privilege escalation, lateral movement and other approved activities. Develop an understanding of adversary tactics, techni