Cyber Security Engineer

• Senior Cybersecurity Engineer

• Role Purpose:

• Responsible for supporting the Information Security and Cybersecurity program, with a strong focus on FRA compliance, security controls, risk management, and audit readiness.

• Key Responsibilities:

• Follow up and maintain compliance with FRA cybersecurity requirements, including Resolution 139/2023 and applicable updates.

• Maintain the FRA compliance tracker, gap assessments, remediation plans, and evidence repository.

• Coordinate FRA audits, inspections, regulatory requests, and findings closure.

• Conduct cybersecurity and information-security control assessments.

• Support compliance with ISO 27001, NIST, PCI DSS, CBE, and other applicable requirements.

• Coordinate vulnerability assessments and penetration testing and follow up on remediation.

• Review network, infrastructure, endpoint, IAM, database, and security controls.

• Support security incident management and regulatory reporting where applicable.

• Maintain security policies, procedures, standards, and technical evidence.

• Prepare cybersecurity, FRA compliance, risk, and management reports.

• Work closely with Infrastructure, Network Security, SOC, Risk, Compliance, and Internal Audit teams.

Requirements

• 7+ years of experience in cybersecurity/information security.

• Banking or financial-services experience is preferred.

• Strong knowledge of FRA, ISO 27001, NIST, PCI DSS, and CBE requirements.

• Experience in vulnerability management, penetration testing, security assessments, SIEM, firewalls, EDR, IAM/PAM, and security hardening.

• Strong documentation, audit, follow-up, and stakeholder-management skills.