GRC - Security Compliance Specialist

Job description

**Job Description** **Experience- 6- 10 yrs** **location-Mumbai,Indore** **Responsibilities** - Requirement gathering and analysis – by collaborating with stakeholders (Architects, cloud and containers engineer, capability leads, control owners) to capture and document functional and nonfunctional requirements. - Define and prioritise epics within agile sprints - outlining the goal, completion criteria, and any dependencies – with enough technical details for an engineer to execute. - Work closely with CNAPP engineering and other engineering stakeholders (Cloud services, Containers team, Cyber) to maintain traceability between business requirements, technical specifications and delivered features. - Provide advice to stakeholders new to CNAPP on how to achieve their goals and support them with requirements elicitation. - Conduct workshops and demos with key stakeholders to agree the design approach and to validate the solution – sign-off design and implementation. - Define acceptance criteria to ensure requirements agreed with stakeholders are met. - Map integrations and APIs between CNAPP solution components and HSBC systems e.g. downstream reporting, data lake integrations etc. **Knowledge, Qualifications & Experience** **Technical Skill Set Required** - 5+ years’ experience as Business Analyst in cybersecurity, security and compliance platforms (SaaS/On-premise). - Hands on knowledge in cyber security vulnerability scanning, configuration baseline, compliance, inventory e.g. CNAPP, APSM, CSPM etc. - Proven experience in Agile/Scrum environments writing epics, features, and user stories. - Excellent stakeholder management, facilitation, and communication skills. - Experience with API integrations, microservices, and container orchestration (Kubernetes, AWS, GCP cloud) and DevOps processes - Preferred familiarity with regulatory framework e.g. PCI-DSS, CIS benchmarks, etc. - Preferred relevant certifications e.g. public Cloud (AWS, GCP), certified business analyst **Soft Skill Required** - Ability to work in fast paced environment and ever-changing priorities and having extremely flexible to manage workload. - Able to support aggressive delivery timelines without compromising on quality. - Quick learner - Work with different stakeholders (HSBC Vendors, Project Manager, ITSO & ITSO Delegates, Support teams) & resolve all technical queries in timely manner. - Excellent communication skills – both written and verbal (English) - Proactive, collaborative, and self-motivated - Ability to manage competing priorities and drive consensus