Key Responsibilities

•Maintain and continuously improve the compliance control set, the supporting
evidence and the documentation required by regulatory and audit obligations
(GDPR,NIS2, SAP security audits, SWIFT and GITC), covering:
ØApplication change management and software development life cycle controls
ØSecurity hardening and vulnerability patching of operating systems and
databases
ØIT user access permissions and periodic user access reviews
ØGeneral user access — security audit logs, monitoring evidence and review
ØPrivileged user access (ie Firefighter usage) and privileged activity review
ØGovernance and review of operating systems and databases privileged access
ØPassword policies and baseline identity controls (SSO/MFA principles)
ØSoftware compliance and security — web vulnerability management
ØSWIFT Customer Security Programme (CSP) compliance
•Run the day-to-day operation of the global security awareness programme: plan
and launch phishing simulations and training campaigns, follow up completion,
and report on results




ØTrack training completion and phishing click/report rates, and propose
improvements to campaign content, targeting and follow-up
•Collaborate with the SAP Basis Security & Authorization team to review and
report SoD violations
•Coordinate the global vulnerability management process: consolidate scan
results, prioritise on risk, track remediation with infrastructure, application
and OT owners,and escalate overdue or high-risk items
•Prepare the monthly, quarterly and annual compliance, vulnerability and
awareness reports for the Global Security & Compliance Manager and for Carmeuse
IT leadership
•Support internal and external audits (including GITC): prepare evidence packs,
coordinate control owners, support walkthroughs, and track findings through to
closure
•Maintain the security governance documentation (policies, standards,
procedures, control narratives and the exception register) and participate in
ITSC and cyber security team me

📌 Compliance Analyst (Bengaluru)
🏢 Carmeuse
📍 Bengaluru