Senior Analyst - Information Security Risk Analyst [T500-28451]

Deutsche Börse Group; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Deutsche Börse Group in India, Hyderabad, is seeking a skilled Information Security professional to join the Transformation Office within the IT and Risk & Regulatory unit. The role focuses on conducting risk assessments, managing risk tickets, and supporting IS compliance initiatives.

The candidate should have 1–3 years of information security or risk management experience, strong risk assessment knowledge, and excellent stakeholder communication.

Qualifications

• 1–3 years of experience in information security or risk management.
• Strong understanding of risk assessment concepts (mitigation, acceptance, avoidance, threat modelling, CIA triad).
• Structured with strong problem-solving abilities and analytical mindset.
• Effective communication and stakeholder management skills.
• Preferrable knowledge of ISO 27001 and NIST frameworks; certifications are a plus (CISM, CRISC, CISA, CompTIA Security+).

Responsibilities

• Support CTO teams in conducting regular risk assessments by guiding them through the process.
• Supervise risk tickets and coordinate with application/asset owners to raise extension or closure requests.
• Assist application/asset owners in creating ad-hoc risk entries, handling risks and closing them.
• Prepare and present risk status reports to various stakeholders.
• Track and report metrics related to risk exposure and remediation progress.

Skills

risk assessment

communication

stakeholder management

information security

security frameworks

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field

Job description

Headquartered in Frankfurt, Germany, Deutsche Börse Group is a leading international exchange organization and market infrastructure provider. They empower investors, financial institutions, and companies by facilitating access to global capital markets.

Their India centre is located in Hyderabad, serves as a key strategic hub and comprises India’s top-tier tech talent. They focus on crafting advanced IT solutions that elevate market infrastructure and services. Deutsche Börse Group in India is composed of a team of capital market engineers forming the backbone of financial markets worldwide.

Division:

• Field of activity
• The Deutsche Börse CTO develops and runs the groupwide Information Technology (IT) infrastructure, develops and operates innovative IT products and offers services to the rest of the Group upon which they can build. The CTO area plays a significant role in the achieving the Group’s strategic goals by leading transformation and supporting a stable operating environment.
• The Transformation Office unit supplies reliable project management capabilities and information security management to the CTO and enables the other delivery units within the area to rollout IS compliance requirements and Group IS strategy.
• The successful candidate will join the Information Security, Risk & Regulatory unit and support in carrying out these responsibilities.

Tasks/responsibilities:

• Support CTO teams in conducting regular risk assessments by guiding them through the process.
• Supervise risk tickets and coordinate with application/asset owners to raise extension or closure requests to avoid overdue items.
• Assist application/asset owners in creating ad-hoc risk entries, handling risks and closing them.

Reporting and Monitoring:

• Prepare and present risk status reports to various stakeholders.
• Track and report metrics related to risk exposure and remediation progress.
• Support the creation and operation of the Unit Information Security Committee.
• Maintain and update the knowledge database in Confluence.

Qualifications/required skills:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field.
• 1–3 years of experience in information security, or risk management
• Strong understanding of risk assessment concepts (risk mitigation, acceptance, avoidance, threat modelling, CIA triad).
• Structured with strong problem-solving abilities and analytical mindset.
• Effective communication and stakeholder management skills.
• Preferrable knowledge of Information Security frameworks (ISO 27001, NIST).
• Certifications such as CISM, CRISC, CISA, CompTIA Security+ are a plus.