Information Security Analyst (BISO)
Core
Provides Technology and Cybersecurity risk support, governance, assessment, and oversight activities across APAC, partnering with business and technology owners to identify risks and support control incorporation.
Role type
BISO Analyst (L08)
Builds
Technology and cybersecurity risk assessments, control gap assessments, and regulatory compliance documentation for applications and solutions.
Domain
Financial Services / Cybersecurity Risk & Governance
Deliverable
dashboards & analysis
Required skills
Technology risk assessment, control gap analysis, regulatory compliance, risk documentation, stakeholder engagement, audit support
Preferred skills
CISSP/CISM/CRISC certification, TARA/CGA experience, regulated financial services background, NIST/ISO 27001/CIS/COBIT frameworks, cloud security, IAM, RSA Archer
Technologies
RSA Archer, Jira, Agile frameworks
Responsibilities
Lead assigned Technology Asset Risk Assessments (TARA) and Control Gap Assessments (CGA); Support security and technology risk assessments for new applications and initiatives; Review architecture blueprints and system designs for security alignment; Support APAC-specific regulatory reviews and audit activities; Communicate risk findings to technical and non-technical stakeholders.
Seniority
Mid-level, hands-on IC