{"id":3386618,"url":"https://alion.io/job/capco-senior-cloud-cyber-security-info-sec-specialist","title":"Senior Cloud & Cyber Security – Info Sec Specialist","company":{"id":1444,"name":"Capco","domain":"capco.com","url":"https://alion.io/company/capco-poland","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":76,"open_postings":126,"ghost_share":0.024,"stale_share":0.873,"repost_share":0.024,"time_to_fill_p50_days":42,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19000,"max_usd":41000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"GCP","optional":false},{"name":"Wiz","optional":false},{"name":"Zero Trust","optional":false},{"name":"Bicep","optional":true},{"name":"CloudFormation","optional":true},{"name":"Confluence","optional":true},{"name":"Jira","optional":true},{"name":"SharePoint","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-28T06:14:00Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-03T19:07:32Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Job Title: Senior Cloud & Cyber Security - Info Sec Specialist\nAbout Us\n“Capco, a Wipro company, is a global technology and management consulting firm. Awarded with Consultancy of the year in the British Bank Award and has been ranked Top 100 Best Companies for Women in India 2022 byAvtar & Seramount. With our presence across 32 cities across globe, we support 100+ clients across banking, financial and Energy sectors. We are recognized for our deep transformation execution and delivery. \nWHY JOIN CAPCO?\nYou will work on engaging projects with the largest international and local banks, insurance companies, payment service providers and other key players in the industry. The projects that will transform the financial services industry.\nMAKE AN IMPACT\nInnovative thinking, delivery excellence and thought leadership to help our clients transform their business. Together with our clients and industry partners, we deliver disruptive work that is changing energy and financial services.\n#BEYOURSELFATWORK\nCapco has a tolerant, open culture that values diversity, inclusivity, and creativity.\nCAREER ADVANCEMENT\nWith no forced hierarchy at Capco, everyone has the opportunity to grow as we grow, taking their career into their own hands.\nDIVERSITY & INCLUSION\nWe believe that diversity of people and perspective gives us a competitive advantage.\nLocation - BANGALORE\nRole Description\nRequired Qualifications\nSeven or more years of relevant experience in information security, cloud security, security architecture, security engineering, technology risk, control assessment, or security standards development. • Demonstrated experience developing, maintaining, implementing, or assessing STIGs, CIS Benchmarks, secure configuration baselines, hardening guides, or equivalent technical security standards. • Practical security knowledge across GCP, AWS, and Azure, with strong working experience in at least two of the three cloud platforms and the ability to research requirements for the third. • Strong understanding of cloud security concepts across identity and access management, networking, compute, containers, serverless services, data protection, encryption and key management, logging, monitoring, vulnerability management, and platform governance. • Working knowledge of Azure Policy, Wiz, AWS Service Control Policies, GCP Organization Policies, CSPM capabilities, and automated configuration or compliance assessment approaches. • Experience reviewing technical evidence and determining whether it satisfies documented control requirements and assessment procedures. • Experience supporting manual control validation, attestation, evidence collection, remediation tracking, exception handling, or control approval workflows where automated validation is unavailable. • Knowledge of NIST SP 800-53, CIS Controls and Benchmarks, ISO/IEC 27001, zero trust principles, and risk-based control design. • Ability to interpret cloud-provider documentation and convert complex technical content into concise, testable, and auditable requirements. • Strong technical writing, analysis, organization, and stakeholder-management skills. • Ability to work independently, manage multiple assigned deliverables, incorporate review feedback, and maintain accurate status reporting in an Agile delivery environment.\nPreferred Qualifications\nCloud or security certification such as CCSP, CISSP, AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or Google Professional Cloud Security Engineer. • Experience in standards and lifecycle governance, security policy, control engineering, cloud governance, or technical control testing. • Experience with infrastructure as code or policy as code using Terraform, CloudFormation, Bicep, ARM templates, or equivalent technologies. • Experience with regulated financial services or another highly regulated industry. • Experience supporting audit or regulatory examinations and producing audit-defensible evidence packages. • Familiarity with Jira, Confluence, SharePoint, or comparable tools used to manage requirements, evidence, reviews, approvals, and delivery status.\nExpected Deliverables\nNew or revised cloud STIGs and supporting control documentation that meet SLG quality and governance requirements. • Documented cleanup recommendations and completed remediation of assigned STIG content. • Accurate control mappings, assessment procedures, implementation guidance, and evidence requirements. • Complete evidence packages and validation summaries for controls without automated CaC coverage. • Documented review comments, issue dispositions, stakeholder decisions, approvals, exceptions, and open dependencies. • Regular delivery-status reporting, including completed work, work in progress, blockers, and risks requiring escalation.\nEngagement Success Criteria\nAssigned STIG deliverables are technically accurate, internally consistent, testable, traceable, and completed in accordance with agreed priorities and review cycles. • Evidence packages clearly demonstrate whether the applicable requirement has been implemented and contain sufficient documentation to support review and audit activities. • Manual validation is performed consistently where CaC is unavailable, with conclusions linked to the requirement, assessment method, evidence reviewed, and accountable approver. • Issues and dependencies are identified early, documented clearly, and escalated through the designated SLG governance process. • Work products are maintained in the approved repositories and can be understood and reused by TD personnel after the engagement ends.","description_format":"text","description_chars":5638,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","RegTech, AML & Compliance","IT Consulting & Digital Transformation","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-28T07:55:43Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":5,"expected_fill_days":42,"reasons":["conf:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/capco-senior-cloud-cyber-security-info-sec-specialist","json_url":"https://alion.io/job/capco-senior-cloud-cyber-security-info-sec-specialist.json","meta":{"generated_at":"2026-11-03T20:37:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3353,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1444},"rest":"https://alion.io/mcp/rest/get_company?id=1444"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcapco-senior-cloud-cyber-security-info-sec-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcapco-senior-cloud-cyber-security-info-sec-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcapco-senior-cloud-cyber-security-info-sec-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/capco-senior-cloud-cyber-security-info-sec-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcapco-senior-cloud-cyber-security-info-sec-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3386618}},{"tool":"search_jobs","arguments":{"company":"capco.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3386618},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}