Carmeuse

Global lime and limestone supplier

Cyber Security Compliance Analyst

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours

Full-timeBengaluru, Karnataka, IndiaNo salary listedIn-person

About the Job

Requirements

A bachelor's degree in engineering or technology in Information Security, Computer Science, IT, or a related field.
At least 8 years of experience in IT or cybersecurity, with hands-on exposure to compliance, audit support, and reporting.
Working knowledge of GDPR, NIS2, SAP security audits, SWIFT, and GITC frameworks.
CISA certification is mandatory.
Knowledge of cybersecurity governance, control frameworks, and audit evidence expectations.
Knowledge of regulatory and industry compliance topics including GDPR, NIS2, SAP security audits, and SWIFT compliance.
Knowledge of user access, Segregation of Duties, and identity and access fundamentals, including SSO and MFA principles.
Knowledge of vulnerability management principles, including risk-based prioritization, remediation lifecycle, and reporting.
Knowledge of security awareness platforms such as KnowBe4.
Proficiency with Microsoft Excel, Word, and PowerPoint, and compliance reporting or dashboarding.
Ability to collaborate cross-functionally with IT, OT, Legal and Privacy, and business owners.

Responsibilities

Maintain and continuously improve the compliance control set, supporting evidence, and documentation required by regulatory and audit obligations, covering GDPR, NIS2, SAP security audits, SWIFT, and GITC.
Maintain application change management and software development lifecycle controls.
Maintain security hardening and vulnerability patching controls for operating systems and databases.
Maintain IT user access permissions and conduct periodic user access reviews.
Maintain general user access security audit logs, monitoring evidence, and reviews.
Review privileged user access, including Firefighter usage and privileged activity.
Govern and review privileged access to operating systems and databases.
Maintain password policies and baseline identity controls, including SSO and MFA principles.
Maintain software compliance and security controls, including web vulnerability management.
Maintain compliance with the SWIFT Customer Security Programme.
Operate the global security awareness programme by planning and launching phishing simulations and training campaigns, following up on completion, and reporting results.
Track training completion and phishing click and report rates, and propose improvements to campaign content, targeting, and follow-up.
Collaborate with the SAP Basis Security and Authorization team to review and report Segregation of Duties violations.
Coordinate global vulnerability management by consolidating scan results, prioritizing by risk, tracking remediation with infrastructure, application, and OT owners, and escalating overdue or high-risk items.
Prepare monthly, quarterly, and annual compliance, vulnerability, and awareness reports for the Global Security and Compliance Manager and IT leadership.
Support internal and external audits, including GITC, by preparing evidence packs, coordinating control owners, supporting walkthroughs, and tracking findings through closure.
Maintain security governance documentation, including policies, standards, procedures, control narratives, and the exception register, and participate in ITSC and cybersecurity team meetings.
Ensure regulatory and audit compliance controls are secure and auditable in line with established security, audit, and regulatory requirements.
Operate global security awareness and vulnerability management follow-up processes, driving measurable improvement in employee behavior and remediation performance.
Maintain the compliance documentation, metrics, and reporting used by the Global Security and Compliance Manager and IT leadership.

Desired Qualifications

A GRC or internal audit background is an advantage.
ISO 27001 or CIPM certification is a plus.

Key Responsibilities

•Maintain and continuously improve the compliance control set, the supporting evidence and the documentation required by regulatory and audit obligations (GDPR,NIS2, SAP security audits, SWIFT and GITC), covering:

ØApplication change management and software development life cycle controls

ØSecurity hardening and vulnerability patching of operating systems and databases

ØIT user access permissions and periodic user access reviews

ØGeneral user access — security audit logs, monitoring evidence and review

ØPrivileged user access (ie Firefighter usage) and privileged activity review

ØGovernance and review of operating systems and databases privileged access

ØPassword policies and baseline identity controls (SSO/MFA principles)

ØSoftware compliance and security — web vulnerability management

ØSWIFT Customer Security Programme (CSP) compliance

•Run the day-to-day operation of the global security awareness programme: plan and launch phishing simulations and training campaigns, follow up completion, and report on results

ØTrack training completion and phishing click/report rates, and propose improvements to campaign content, targeting and follow-up

•Collaborate with the SAP Basis Security & Authorization team to review and report SoD violations

•Coordinate the global vulnerability management process: consolidate scan results, prioritise on risk, track remediation with infrastructure, application and OT owners,and escalate overdue or high-risk items

•Prepare the monthly, quarterly and annual compliance, vulnerability and awareness reports for the Global Security & Compliance Manager and for Carmeuse IT leadership

•Support internal and external audits (including GITC): prepare evidence packs, coordinate control owners, support walkthroughs, and track findings through to closure

•Maintain the security governance documentation (policies, standards, procedures, control narratives and the exception register) and participate in ITSC and cyber security team meetings

•Ensure that Carmeuse's regulatory and audit compliance controls are secure and auditable, in

•line with the established security, audit and regulatory requirements (GDPR, NIS2, SAP security audits, SWIFT and GITC)

•Operate the global security awareness and vulnerability management follow-up processes, driving measurable improvement in employee behaviour and remediation performance

•Maintain the compliance documentation, metrics and reporting used by the Global Security & Compliance Manager and by IT leadership

Key performance indicators :

Compliance and audit findings closed on time; vulnerability remediation

performance against the agreed SLAs (critical / high); security awareness results (training completion rate, phishing simulation click and report rates); timeliness and quality of the compliance evidence, metrics and reporting.

Required

•Bachelor’s degree in engineering / technology in Information Security, Computer Science, IT or a related field

•At least 8 years of experience in IT or cyber security, with hands-on exposure to compliance, audit support and reporting (a GRC or internal audit background is an advantage)

•Working knowledge of regulatory and audit frameworks (GDPR, NIS2, SAP security audits, SWIFT,GITC);

•Mandatory certification: CISA

•ISO 27001 or CIPM are a plus

•Language: English (written & spoken)

•Cyber security governance, control frameworks and audit evidence expectations

•Regulatory and industry compliance topics: GDPR, NIS2, SAP security audits and SWIFT

•compliance

•User access, Segregation of Duties and identity and access fundamentals (SSO/MFA principles)

•Vulnerability management principles (risk-based prioritisation, remediation lifecycle, reporting)

•and security awareness platforms such as KnowBe4

Skills

•Problem solving, with attention to detail in controls, evidence and documentation

•Written and oral communication skills — able to explain technical topics to non-technical stakeholders

•Organization & planning — able to track many actions through to closure and hold a reporting cadence

•Microsoft desktop applications (Excel, Word, PowerPoint) and compliance reporting/dashboarding

•Cross-functional collaboration with IT, OT, Legal & Privacy and business owners; pragmatic and outcome-focused

About the Company

Carmeuse

Global lime and limestone supplier

Carmeuse is a global provider of lime and limestone products and related engineering and equipment services. It serves industries such as mining, environmental services, construction, and materials processing, offering customized solutions to meet specific client needs. Its products are produced and processed for use in various applications (for example, steelmaking, water treatment, soil stabilization) and are accompanied by engineering, installation, and equipment services. What sets Carmeuse apart is its scale and its focus on tailor-made solutions, along with a strong commitment to corporate social responsibility through the Carmeuse Foundation that funds educational, training, and mentoring opportunities for underprivileged children. The company’s goal is to deliver reliable lime and limestone products and related services worldwide, while advancing responsible practices and helping clients meet their technical and environmental requirements.

Company size: 1,001-5,000
Company stage: Growth Equity (Non-Venture Capital)
Total funding: $27.5M
Headquarters: Ottignies-Louvain-la-Neuve, Belgium
Founded: 1860

Recently Posted Jobs

Explore more opportunities at Carmeuse

See more jobs