{"id":1540733,"url":"https://alion.io/job/carmeuse-cyber-security-compliance-analyst","title":"Cyber Security Compliance Analyst","company":{"id":2018484,"name":"Carmeuse","domain":"carmeuse.com","url":"https://alion.io/company/carmeuse","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":88,"open_postings":25,"ghost_share":0,"stale_share":0.48,"repost_share":0,"time_to_fill_p50_days":48,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19500,"max_usd":42000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false}],"status":"live","first_seen_at":"2026-09-07T10:08:02Z","employer_posted_date":"2026-09-07","last_verified_at":"2026-10-18T09:29:17Z","board_verified":true,"closed_at":null,"days_open":41,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":41},"description":"Key Responsibilities\nMaintain and continuously improve the compliance control set, the supporting evidence and the documentation required by regulatory and audit obligations (GDPR,NIS2, SAP security audits, SWIFT and GITC), covering:\nØApplication change management and software development life cycle controls\nØSecurity hardening and vulnerability patching of operating systems and databases\nØIT user access permissions and periodic user access reviews\nØGeneral user access - security audit logs, monitoring evidence and review\nØPrivileged user access (ie Firefighter usage) and privileged activity review\nØGovernance and review of operating systems and databases privileged access\nØPassword policies and baseline identity controls (SSO/MFA principles)\nØSoftware compliance and security - web vulnerability management\nØSWIFT Customer Security Programme (CSP) compliance\nRun the day-to-day operation of the global security awareness programme: plan and launch phishing simulations and training campaigns, follow up completion, and report on results\nØTrack training completion and phishing click/report rates, and propose improvements to campaign content, targeting and follow-up\nCollaborate with the SAP Basis Security & Authorization team to review and report SoD violations\nCoordinate the global vulnerability management process: consolidate scan results, prioritise on risk, track remediation with infrastructure, application and OT owners,and escalate overdue or high-risk items\nPrepare the monthly, quarterly and annual compliance, vulnerability and awareness reports for the Global Security & Compliance Manager and for Carmeuse IT leadership\nSupport internal and external audits (including GITC): prepare evidence packs, coordinate control owners, support walkthroughs, and track findings through to closure\nMaintain the security governance documentation (policies, standards, procedures, control narratives and the exception register) and participate in ITSC and cyber security team meetings\nEnsure that Carmeuse's regulatory and audit compliance controls are secure and auditable, in\nline with the established security, audit and regulatory requirements (GDPR, NIS2, SAP security audits, SWIFT and GITC)\nOperate the global security awareness and vulnerability management follow-up processes, driving measurable improvement in employee behaviour and remediation performance\nMaintain the compliance documentation, metrics and reporting used by the Global Security & Compliance Manager and by IT leadership\nKey performance indicators :\nCompliance and audit findings closed on time; vulnerability remediation\nperformance against the agreed SLAs (critical / high); security awareness results (training completion rate, phishing simulation click and report rates); timeliness and quality of the compliance evidence, metrics and reporting.\nRequired\nBachelor’s degree in engineering / technology in Information Security, Computer Science, IT or a related field\nAt least 8 years of experience in IT or cyber security, with hands-on exposure to compliance, audit support and reporting (a GRC or internal audit background is an advantage)\nWorking knowledge of regulatory and audit frameworks (GDPR, NIS2, SAP security audits, SWIFT,GITC);\nMandatory certification: CISA\nISO 27001 or CIPM are a plus\nLanguage: English (written & spoken)\nCyber security governance, control frameworks and audit evidence expectations\nRegulatory and industry compliance topics: GDPR, NIS2, SAP security audits and SWIFT\ncompliance\nUser access, Segregation of Duties and identity and access fundamentals (SSO/MFA principles)\nVulnerability management principles (risk-based prioritisation, remediation lifecycle, reporting)\nand security awareness platforms such as KnowBe4\nSkills\nProblem solving, with attention to detail in controls, evidence and documentation\nWritten and oral communication skills - able to explain technical topics to non-technical stakeholders\nOrganization & planning - able to track many actions through to closure and hold a reporting cadence\nMicrosoft desktop applications (Excel, Word, PowerPoint) and compliance reporting/dashboarding\nCross-functional collaboration with IT, OT, Legal & Privacy and business owners; pragmatic and outcome-focused","description_format":"text","description_chars":4244,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Security Compliance","Natural Stones"],"lifecycle":[{"event":"open","at":"2026-09-30T21:05:00Z"}],"visa":[],"liveness":{"score":57,"band":"ok","label":"Likely open","p_open":1,"p_active":0.761,"p_room":0.75,"age_days":39,"expected_fill_days":48,"reasons":["conf:5","win:late"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/carmeuse-cyber-security-compliance-analyst","json_url":"https://alion.io/job/carmeuse-cyber-security-compliance-analyst.json","meta":{"generated_at":"2026-10-18T16:01:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21989,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2018484},"rest":"https://alion.io/mcp/rest/get_company?id=2018484"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcarmeuse-cyber-security-compliance-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcarmeuse-cyber-security-compliance-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcarmeuse-cyber-security-compliance-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/carmeuse-cyber-security-compliance-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcarmeuse-cyber-security-compliance-analyst"}]}