Cyber Security Assurance Analyst

Role & responsibilities

Your Role will be divided into 2 parts:

- Handling of security questionnaires:

Complete security questionnaire requests within established SLA to provide our customers with assurance that the expected security controls have been established within our organization and products.

Assist legal teams in reviewing security clauses in customer contracts.

Maintain and update knowledge base of security and compliance content to ensure our customer assurance materials remain up to date.

Support sales teams with security expertise in conversations with customers and customer audits.

Apply knowledge of our company's products and understand how they map to privacy and security compliance requirements.

- Performing non-compliance checks on API calls:

Review APIs discovered by the implemented tools

Assess reported risks and vulnerabilities on APIs

Explain risks and issues to development teams

Propose priorities and motivate priorities

Organize change workloads and validate the changes afterwards

Establish procedures and processes for the API security posture

Create and verify API specs to be enforced

Preferred candidate profile

Bachelors or a Master’s degree in Cyber Security or Computer Science.

- 5+ years of experience in a combination of Compliance, Audit, Information Security.

- 2+ years working and managing security/compliance questionnaires.

- Knowledge of information security management frameworks, such as ISO 27000 series, NIST, ISF, and the NIS2 Directive and DORA.

- Technical knowledge in IT core systems: web technology, container technology, network security, cloud platforms and API development.

- Knowledge in software development lifecycle and architecture and design best practices.

- High analytical assessment skills and communication skills.

- Previous experience and knowledge in telco domain is a plus.

- Excellent communication and stakeholder management skills.

- Can operate with a great deal of autonomy, results-oriented and able to deliver within preset deadlines.