Information Security Analyst (BISO)
Core
Provides Technology and Cybersecurity risk support, governance, assessment, and oversight activities across APAC, partnering with business and technology owners to identify risks and support control incorporation.
Role type
Senior IC BISO (Business Information Security Officer)
Builds
Risk assessments, control gap analyses, and governance frameworks for technology and cybersecurity
Domain
Financial Services / Cybersecurity Governance
Deliverable
dashboards & analysis
Required skills
Technology risk assessment, Control gap analysis, Regulatory compliance, Stakeholder engagement, Risk documentation, Audit support
Preferred skills
CISSP/CISM/CRISC certification, Regulated financial services experience, NIST/ISO 27001/CIS/COBIT frameworks, Cloud security, IAM, RSA Archer, Agile/Jira
Technologies
RSA Archer, Jira, NIST, ISO 27001, CIS Controls, COBIT
Responsibilities
Lead Technology Asset Risk Assessments (TARA) and Control Gap Assessments (CGA), Support security reviews for new applications and technology initiatives, Review risk assessments and control deficiencies, Support APAC-specific regulatory reviews and audit activities, Communicate risk outcomes to technical and non-technical stakeholders
Seniority
Mid-Senior, hands-on IC