Associate - Senior Information Security Risk Analyst T500-23415

Position: Associate - Senior Information Security Risk Analyst [T500-23415]
About Deutsche Börse Group:

Headquartered in Frankfurt, Germany, Deutsche Börse Group is a leading international exchange organization and market infrastructure provider. They empower investors, financial institutions, and companies by facilitating access to global capital markets.

Their India centre is located in Hyderabad, serves as a key strategic hub and comprises India’s top-tier tech talent. They focus on crafting advanced IT solutions that elevate market infrastructure and services. Deutsche Börse Group in India is composed of a team of capital market engineers forming the backbone of financial markets worldwide.

Risk Assessment & Analysis:

- Support CTO teams in conducting regular risk assessments by guiding them through the process.
- Supervise risk tickets and coordinate with application/asset owners to raise extension or closure requests to avoid overdue items.
- Assist application and asset owners in creating ad-hoc risk entries.

Reporting:

- Prepare and present risk status reports to various stakeholders.
- Track and report metrics related to risk exposure and remediation progress.
- Support the creation and operation of the Unit Information Security Committee.

Monitoring:

- Assist central and CTO teams in organizing penetration tests according to Group guidelines.
- Maintain and update the knowledge database in Confluence.

Qualifications/required skills:

- Bachelor’s degree in computer science, Cybersecurity, Information Systems, or related field.
- 2–4 years of experience in information security, risk management, or IT audit.
- Strong understanding of risk assessment concepts (risk mitigation, acceptance, avoidance, threat modeling, CIA triad).
- Solid knowledge of Information Security frameworks (ISO 27001, NIST).
- Certifications such as CISM, CRISC, CISA, CompTIA Security+ are a plus.
- Strong problem-solving abilities and analytical mindset.
- Effective communication and stakeholder management skills.