Information Security Compliance Analyst (f/m/d)

CIO / COO (Div) - Hyderabad - Professional - Information Technology - Full-time - Unlimited

Division:

Deutsche Börse AG, Chief Information Officer/Chief Operating Officer (CIO/COO), Chief Technology Officer (CTO), Information Security, Risk and Regulations (U)

Field of activity:

- The Deutsche Börse CTO develops and runs the groupwide Information Technology (IT) infrastructure such as data centers, networks, cloud platforms (Google, Azure), data platforms, the SDLC platform, and develops and operates innovative shared IT services for the rest of the Group on which they can build upon. The CTO area plays a significant role in achieving the Groups strategic goals by leading transformation and supporting a stable operating setting.

Your area of work:

- The successful candidate will join the Information Security, Risk & Regulations unit of the CTO.
- The Information Security, Risk & Regulatoryunit supports the CTO product lines to comply with the ICT Risk Framework, by supporting the execution of existing controls, analyzing security gaps identified by control functions and collaborating with the products to roll our necessary fixes. The unit works closely with stakeholders across the Group to close or mitigate these gaps and ensure sustainable remediation. Through these activities, the unit contributes to improving Information Security governance, compliance, control effectiveness, reporting transparency, and the overall security posture of CTO-operated platforms and services. The team represents the CTO organization in Group-wide security and governance forums and drives sustainable remediation of identified security gaps and control deficiencies.

Your responsibilities:

Firewall Rules Governance & Security Control Review:

- Review firewall rule violation reports and perform first-level analysis of findings;
- Assess firewall rule requests and exceptions for compliance with security standards and segmentation requirements;
- Challenge rule owners on overly permissive, obsolete, or non-compliant firewall rules;
- Coordinate discussions between network, security teams,



and infrastructure teams regarding policy violations;
- Track policy exceptions and ensure timely review and closure;
- Escalate security risks, recurring exceptions, and policy violations to relevant stakeholders management

IT Asset Management Governance:

- Coordinate governance activities related to IT Asset Management (ITAM) and Configuration Management Database (CMDB) controls;
- Monitor asset misplacement and ownership compliance;
- Generate and maintain asset misplacement reports and associated KPIs;
- Follow up with asset owners and operational teams to resolve ITAM-related issues as a support analyst Level 2;
- Collaborate with IT Governance and Asset Management teams to improve asset data quality and control effectiveness;
- Drive corrective actions and track remediation progress;

Security Metrics Governance & Compliance Monitoring:

- Coordinate the collection, validation, consolidation, and distribution of Information Security KPIs and compliance metrics;
- Maintain governance processes for security-related controls and reporting;
- Monitor control effectiveness and compliance performance across the environment;
- Identify trends, compliance gaps, control weaknesses, and remediation opportunities;
- Produce regular management reports and dashboards using Excel and Power BI;
- Support audit, risk, and compliance activities through accurate reporting and evidence collection;

Stakeholder Coordination & Issue Management:

- Organize and facilitate governance meetings with stakeholders, asset owners, network security teams, and operational teams;
- Coordinate action plans and follow-up activities related to compliance findings;
- Serve as a central point of contact for governance-related security and asset management topics for CTO related controls;




- Support stakeholders in understanding requirements and implementing corrective actions;
- Ensure timely closure of identified compliance issues;

Continuous Improvement:

- Identify opportunities to automate reporting and improve governance processes;
- Enhance reporting accuracy, KPI quality, and dashboard effectiveness;
- Contribute to the development of governance procedures, standards, and operational controls;
- Promote best practices in information security governance and IT asset management.

Your profile:

Required Qualifications:

- Bachelor / Master 's degree in Information Security, Cybersecurity, Computer Science, Information Technology, Business Information Systems, or a related field;
- Approximately 3 years of experience in Information Security or IT Operations;
- Good understanding of:
- Network security fundamentals (TCP/IP, DNS, routing, VLANs, network segmentation) and protocols and services (HTTP/S, SSH, FTP, SMTP, LDAP, SNMP, etc.) ;
- Firewall rule sets and identify basic security weaknesses;
- Firewall violations and policy exceptions;
- IT Asset Management (ITAM) and CMDB governance;
- Information Security controls and compliance processes;
- Security metrics and KPI reporting;

- Ability to investigate issues, identify root causes, and coordinate corrective actions with multiple stakeholders;
- Experience working with security metrics, KPIs, compliance reporting, or operational risk monitoring;
- Experience analyzing data, identifying compliance gaps, and tracking remediation activities;
- Strong analytical and problem-solving skills with attention to detail.
- Excellent communication and stakeholder management skills, with the ability to interact effectively with both technical and non-technical audiences;
- Ability to work independently;
- Fluent written and spoken English;
- Prior experience with network related compliance review is a strong plus;
- Prior experience with Power Bi is a strong plus.

Internal applications will be treated strictly confidential. Applications from disabled persons are explicitly welcome.

📌 Senior Analyst - Security Analyst (India)
🏢 Deutsche Borse Group
📍 India