Senior Analyst - Information Security Risk Analyst [T500-30224]

Deutsche Börse Group; Hyderabad; Sur place; INR 1 200 000 - 1 800 000; Plein temps

Résumé du poste

Deutsche Börse Group in Hyderabad, India, is seeking an Information Security Compliance Analyst to join the CTO’s Information Security, Risk & Regulations unit. You will help govern firewall rules, manage IT assets, and monitor security KPIs to strengthen governance across Group IT platforms.

The role requires about 3 years in information security or IT operations, strong networking knowledge, and fluent English.

Qualifications

• Bachelor or Master degree in Information Security, Cybersecurity, Computer Science, Information Technology, Business Information Systems, or a related field.
• Approximately 3 years of experience in Information Security or IT Operations.
• Fluent written and spoken English.

Responsabilités

• Review firewall rule violation reports and perform first-level analysis.
• Assess firewall rule requests and exceptions for compliance with security standards.
• Coordinate discussions between network, security and infrastructure teams regarding policy violations.
• Track policy exceptions and ensure timely review and closure.

Connaissances

Information Security

IT Operations

Data analysis

Power BI

Excel

English fluency

Formation

Bachelor / Master in Information Security or related field

Outils

Power BI

CMDB

Firewall management

TCP/IP

Description du poste

Headquartered in Frankfurt, Germany, Deutsche Börse Group is a leading international exchange organization and market infrastructure provider. They empower investors, financial institutions, and companies by facilitating access to global capital markets.

Their India centre is located in Hyderabad, serves as a key strategic hub and comprises India’s top-tier tech talent. They focus on crafting advanced IT solutions that elevate market infrastructure and services. Deutsche Börse Group in India is composed of a team of capital market engineers forming the backbone of financial markets worldwide.

Information Security Compliance Analyst (f/m/d)

CIO / COO (Div) - Hyderabad - Professional - Information Technology - Full-time - Unlimited

Division:

Field of activity:

• The Deutsche Börse CTO develops and runs the groupwide Information Technology (IT) infrastructure such as data centers, networks, cloud platforms (Google, Azure), data platforms, the SDLC platform, and develops and operates innovative shared IT services for the rest of the Group on which they can build upon. The CTO area plays a significant role in achieving the Group’s strategic goals by leading transformation and supporting a stable operating environment.

Your area of work:

• The successful candidate will join the Information Security, Risk & Regulations unit of the CTO.
• The Information Security, Risk & Regulatory unit supports the CTO product lines to comply with the ICT Risk Framework, by supporting the execution of existing controls, analyzing security gaps identified by control functions and collaborating with the products to roll our necessary fixes. The unit works closely with stakeholders across the Group to close or mitigate these gaps and ensure sustainable remediation. Through these activities, the unit contributes to improving Information Security governance, compliance, control effectiveness, reporting transparency, and the overall security posture of CTO-operated platforms and services. The team represents the CTO organization in Group-wide security and governance forums and drives sustainable remediation of identified security gaps and control deficiencies.

Your responsibilities:

Firewall Rules’ Governance & Security Control Review:

• Review firewall rule violation reports and perform first-level analysis of findings;
• Assess firewall rule requests and exceptions for compliance with security standards and segmentation requirements;
• Challenge rule owners on overly permissive, obsolete, or non-compliant firewall rules;
• Coordinate discussions between network, security teams, and infrastructure teams regarding policy violations;
• Track policy exceptions and ensure timely review and closure;
• Escalate security risks, recurring exceptions, and policy violations to relevant stakeholders’ management

IT Asset Management Governance:

• Coordinate governance activities related to IT Asset Management (ITAM) and Configuration Management Database (CMDB) controls;
• Monitor asset misplacement and ownership compliance;
• Generate and maintain asset misplacement reports and associated KPIs;
• Follow up with asset owners and operational teams to resolve ITAM-related issues as a support analyst Level 2;
• Collaborate with IT Governance and Asset Management teams to improve asset data quality and control effectiveness;
• Drive corrective actions and track remediation progress

Security Metrics Governance & Compliance Monitoring:

• Coordinate the collection, validation, consolidation, and distribution of Information Security KPIs and compliance metrics;
• Maintain governance processes for security-related controls and reporting;
• Monitor control effectiveness and compliance performance across the environment;
• Identify trends, compliance gaps, control weaknesses, and remediation opportunities;
• Produce regular management reports and dashboards using Excel and Power BI;
• Support audit, risk, and compliance activities through accurate reporting and evidence collection

Stakeholder Coordination & Issue Management:

• Organize and facilitate governance meetings with stakeholders, asset owners, network security teams, and operational teams;
• Coordinate action plans and follow-up activities related to compliance findings;
• Serve as a central point of contact for governance-related security and asset management topics for CTO related controls;
• Support stakeholders in understanding requirements and implementing corrective actions;
• Ensure timely closure of identified compliance issues
• Identify opportunities to automate reporting and improve governance processes;
• Enhance reporting accuracy, KPI quality, and dashboard effectiveness;
• Contribute to the development of governance procedures, standards, and operational controls;
• Promote best practices in information security governance and IT asset management.

Your Profile:

Required Qualifications:

• Bachelor / Master 's degree in Information Security, Cybersecurity, Computer Science, Information Technology, Business Information Systems, or a related field;
• Approximately 3 years of experience in Information Security or IT Operations;

Good understanding of:

• Network security fundamentals (TCP/IP, DNS, routing, VLANs, network segmentation) and protocols and services (HTTP/S, SSH, FTP, SMTP, LDAP, SNMP, etc.) ;
• Firewall rule sets and identify basic security weaknesses;
• Firewall violations and policy exceptions;
• IT Asset Management (ITAM) and CMDB governance;
• Information Security controls and compliance processes;
• Security metrics and KPI reporting;
• Ability to investigate issues, identify root causes, and coordinate corrective actions with multiple stakeholders;
• Experience working with security metrics, KPIs, compliance reporting, or operational risk monitoring;
• Experience analyzing data, identifying compliance gaps, and tracking remediation activities;
• Strong analytical and problem-solving skills with attention to detail.
• Excellent communication and stakeholder management skills, with the ability to interact effectively with both technical and non-technical audiences;
• Ability to work independently;
• Fluent written and spoken English;
• Prior experience with network related compliance review is a strong plus;
• Prior experience with PowerBi is a strong plus.
• Internal applications will be treated strictly confidential. Applications from disabled persons are explicitly welcome.