Cyber Security Senior Analyst

·       Own and drive security compliance initiatives for a portfolio of banking platforms and applications, aligning with functional and technical teams.

·       Partner closely with application and technology teams during major platform evolutions, ensuring security-by-design across architecture and functionality.

·       Monitor and ensure application compliance with global regulatory and audit frameworks, including ECB, NIST, GDPR, NYDFS, and SECAIA.

·       Drive Third-Party Security Risk Management (TPSRM) activities, ensuring adherence to controls, processes, and compliance requirements.

·       Strengthen and maintain application and platform security in line with regulatory mandates and SG Group security standards.

·       Collaborate with cross-functional teams to deploy, troubleshoot, and sustain compliant security solutions.

·       Independently perform Application Security Assessments (ASA), security control evaluations, and provide actionable remediation recommendations.

·       Conduct risk assessments, manage derogations and ad-hoc security requests, and maintain formal risk acceptance documentation per group guidelines.

·       Embed Secure-by-Design principles throughout the SDLC and evangelize best practices.

·       Prepare BAU and program-level security reports, ensuring clear and effective stakeholder communication.

·       Plan, track, and drive remediation actions autonomously, ensuring timely closure and continual risk reduction.

·       Train and mentor teams on secure development practices and emerging security technologies.

·     3- 5 years of experience in Information/Cyber Security.

·       Strong understanding of application and infrastructure architecture with the ability to engage effectively with architects and project managers.

·       Hands-on experience with SDLC security, application security, GRC(Governance Regulations & Compliance) and security operations.

·       Working knowledge of:

o   Application Security, Vulnerability Management, Cloud Security

o   IAM, Data Encryption, Network and Infrastructure Security

o   Risk Assessment methodologies and regulatory compliance (GDPR, NYDFS, SCHREMS, DORA)

·       Experience with security tools including Qualys, SonarQube, Netsparker, OWASP tools, and open-source security testing frameworks.

·       Strong documentation, process improvement, and analytical capabilities.

·       High ethical standards with strong interpersonal and problem-solving skills.

·       Security certifications: CISSP, CISA, CRISC, CEH, GISF, SSCP

·       Experience in risk analysis, security recommendations, SIEM, database security testing and Threat Modelling.

·       Development experience with APIs and services

·       Experience working in Agile delivery environments

·       Application Security, Risk Management and Regulatory Compliance.

·       Background in application security management and application criticality assessments.

·       Cloud and API Security

·       Vulnerability Management,  DevSecOps, VAPT(Vulnerability Assessment & Penetration Testing)

·       Strong customer and business stakeholder engagement

·       Excellent communication, negotiation, and influencing skills

·       Strong stakeholder and customer engagement with an assertive mindset.

·       Logical, structured approach to planning, analysis, and decision-making

·       Self-starter with strong ownership and workload management skills

·       Excellent analytical, organizational, and time-management abilities

·       Ability to prioritize, work under pressure, and meet critical deadlines

·       Strategic thinker with strong understanding of end-to-end system dependencies

·       Collaborative team player with a proactive and solution-oriented mindset

Qualifications
·       B.Tech or equivalent degree in IT/Computer science, Cyber Security or Information Technology stream

At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious.
Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating and taking action are part of our DNA.
If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!
Still hesitating?
You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices and sharing their skills with charities. There are many ways to get involved. 

 

We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection