Cyber Security & Compliance Analyst (CSCA)

Role & Responsibilities

• Work with the product and development teams to design and develop Cyber Security, Risk Management and Compliance products.
• Understand industry requirements and translate them into product features and security requirements.
• Contribute to the development of Compliance, Risk Management and Cyber Security modules.
• Perform Vulnerability Assessment and Penetration Testing (VAPT) for newly available tools.
• Identify security vulnerabilities and provide recommendations for remediation.
• Help develop features for security assessment, risk identification, compliance monitoring and audit management.
• Research and implement requirements based on security frameworks and applicable compliance standards.
• Assist in developing risk assessment, control management, compliance tracking and security audit workflows.
• Prepare technical documentation, security reports and compliance-related documentation.
• Research emerging Cyber Security threats, vulnerabilities, regulations and compliance requirements and translate them into product improvements.
• Collaborate with Product, Development, QA and Cyber Security teams throughout the product development lifecycle.

Preferred Candidate Profile

• Bachelor's degree in Computer Science, IT, Cyber Security, Information Security or a related field.
• Minimum 1 year of experience in Cyber Security, Risk Management, Compliance, VAPT or Security Auditing.
• Strong interest in building Cyber Security and Compliance products, not only performing security assessments.
• Understanding of Cyber Security, Risk Management and Compliance concepts.
• Knowledge of ISO 27001, OWASP, NIST or other security/compliance frameworks is preferred.
• Basic understanding of Web Applications, APIs, Databases and Network Security.
• Knowledge of VAPT/security tools such as Burp Suite, Nmap, Nessus/OpenVAS is an advantage.
• Good analytical, problem-solving and documentation skills.
• Ability to understand business requirements and convert them into technical/product requirements.
• Good communication and teamwork skills.

Perks & Benefits

• Opportunity to build and work on proprietary Cyber Security, Risk Management and Compliance products.
• Exposure to the complete product development lifecycle, from requirements to implementation and testing.
• Hands-on experience with Cyber Security, Risk Management and Compliance technologies.
• Opportunity to work with industry security standards and compliance frameworks.
• Learning opportunities in VAPT, Application Security and Information Security.
• Opportunity to work closely with Product, Development, QA and Cyber Security teams.
• Professional growth and career advancement opportunities.