Proximus- Cyber Security Assurance Analyst- Day 0 Hiring

Cyber Security Assurance Analyst

Must have skills: 2 skills which are non-negotiable. Role will be divided into two parts:

Handling of security questionnaires: Complete security questionnaire requests within established SLA to provide our customers with assurance that the expected security controls have been established within our organization and products. Assist legal teams in reviewing security clauses in customer contracts. Maintain and update knowledge base of security and compliance content to ensure our customer assurance materials remain up to date. Support sales teams with security expertise in conversations with customers and customer audits. Apply knowledge of our company's products and understand how they map to privacy and security compliance requirements.

Performing non-compliance checks on API calls: Review APIs discovered by the implemented tools. Assess reported risks and vulnerabilities on APIs. Explain risks and issues to development teams. Propose priorities and motivate priorities. Organize change workloads and validate the changes afterwards. Establish procedures and processes for the API security posture. Create and verify API specs to be enforced.

5+ years of experience in a combination of Compliance, Audit, Information Security. 2+ years working and managing security/compliance questionnaires. Knowledge of information security management frameworks, such as ISO 27000 series, NIST, ISF, and the NIS2 Directive and DORA. Technical knowledge in IT core systems: web technology, container technology, network security, cloud platforms and API development.

Desirable skills: 1 skill which is nice to have: Can operate with a great deal of autonomy, results-oriented and able to deliver within preset deadlines.

Desired experience range: 8-10 Years

Location(s) where this position can work out of: Proximus – GCC – BLR

Does this position require working from client office all or some days in the week? If yes pls provide details: Proximus – GCC - BLR

Is remote working allowed

Any additional things to be checked

Responsibilities and JD in brief along with additional criteria to be considered (if any): Your Role will be divided into two parts: Handling of security questionnaires and Performing non-compliance checks on API calls. Profile: Bachelor's or a Master's degree in Cyber Security or Computer Science. 5+ years of experience in a combination of Compliance, Audit, Information Security. 2+ years working and managing security/compliance questionnaires. Knowledge of information security management frameworks, such as ISO 27000 series, NIST, ISF, and the NIS2 Directive and DORA. Technical knowledge in IT core systems: web technology, container technology, network security, cloud platforms and API development. Knowledge in software development lifecycle and architecture and design best practices. High analytical assessment skills and communication skills. Previous experience and knowledge in telco domain is a plus. Excellent communication and stakeholder management skills. Can operate with a great deal of autonomy, results-oriented and able to deliver within preset deadlines.