Cyber Security Analyst

Cyber Security Analyst 

Role & Responsibilities

·Own and drive security compliance initiatives for a portfolio of banking platforms and applications, aligning with functional and technical teams.

·Partner closely with application and technology teams during major platform evolutions, ensuring security-by-design across architecture and functionality.

·Monitor and ensure application compliance with global regulatory and audit frameworks, including ECB, NIST, GDPR, NYDFS, and SECAIA.

·Drive Third-Party Security Risk Management (TPSRM) activities, ensuring adherence to controls, processes, and compliance requirements.

·Strengthen and maintain application and platform security in line with regulatory mandates and SG Group security standards.

·Collaborate with cross-functional teams to deploy, troubleshoot, and sustain compliant security solutions.

·Independently perform Application Security Assessments (ASA), security control evaluations, and provide actionable remediation recommendations.

·Conduct risk assessments, manage derogations and ad-hoc security requests, and maintain formal risk acceptance documentation per group guidelines.

·Embed Secure-by-Design principles throughout the SDLC and evangelize best practices.

·Prepare BAU and program-level security reports, ensuring clear and effective stakeholder communication.

·Plan, track, and drive remediation actions autonomously, ensuring timely closure and continual risk reduction.

·Train and mentor teams on secure development practices and emerging security technologies.

Profile Requirements

·3- 6 years of experience in Information/Cyber Security.

·Strong understanding of application and infrastructure architecture with the ability to engage effectively with architects and project managers.

·Hands-on experience with SDLC security, application security, GRC(Governance Regulations & Compliance) and security operations.

·Working knowledge of:

oApplication Security, Vulnerability Management, Cloud Security

oIAM, Data Encryption, Network and Infrastructure Security

oRisk Assessment methodologies and regulatory compliance (GDPR, NYDFS, SCHREMS, DORA)

·Experience with security tools including Qualys, SonarQube, Netsparker, OWASP tools, and open-source security testing frameworks.

·Strong documentation, process improvement, and analytical capabilities.

·High ethical standards with strong interpersonal and problem-solving skills.

Mandatory Skills

·Application Security, Risk Management and Regulatory Compliance.

·Background in application security management and application criticality assessments.

·Cloud and API Security

·Vulnerability Management,  DevSecOps, VAPT(Vulnerability Assessment & Penetration Testing)

·Strong customer and business stakeholder engagement

·Excellent communication, negotiation, and influencing skills

Additional Qualifications (Preferred)

·Security certifications: CISSP, CISA, CRISC, CEH, GISF, SSCP

·Experience in risk analysis, security recommendations, SIEM, database security testing and Threat Modelling.

·Development experience with APIs and services

·Experience working in Agile delivery environments

Core Competencies & Abilities

·Strong stakeholder and customer engagement with an assertive mindset.

·Logical, structured approach to planning, analysis, and decision-making

·Self-starter with strong ownership and workload management skills

·Excellent analytical, organizational, and time-management abilities

·Ability to prioritize, work under pressure, and meet critical deadlines

·Strategic thinker with strong understanding of end-to-end system dependencies

·Collaborative team player with a proactive and solution-oriented mindset