Senior Cloud & Cyber Security – Info Sec Specialist

Capco, India - Bengaluru

Overview

Job Title: Senior Cloud & Cyber Security – Info Sec Specialist

Cloud or security certification such as CCSP, CISSP, AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or Google Professional Cloud Security Engineer. • Experience in standards and lifecycle governance, security policy, control engineering, cloud governance, or technical control testing. • Experience with infrastructure as code or policy as code using Terraform, CloudFormation, Bicep, ARM templates, or equivalent technologies. • Experience with regulated financial services or another highly regulated industry. • Experience supporting audit or regulatory examinations and producing audit-defensible evidence packages. • Familiarity with Jira, Confluence, SharePoint, or comparable tools used to manage requirements, evidence, reviews, approvals, and delivery status.

Expected Deliverables

New or revised cloud STIGs and supporting control documentation that meet SLG quality and governance requirements. • Documented cleanup recommendations and completed remediation of assigned STIG content. • Accurate control mappings, assessment procedures, implementation guidance, and evidence requirements. • Complete evidence packages and validation summaries for controls without automated CaC coverage. • Documented review comments, issue dispositions, stakeholder decisions, approvals, exceptions, and open dependencies. • Regular delivery-status reporting, including completed work, work in progress, blockers, and risks requiring escalation.

Nice to have

Cloud or security certification such as CCSP, CISSP, AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or Google Professional Cloud Security Engineer. • Experience in standards and lifecycle governance, security policy, control engineering, cloud governance, or technical control testing. • Experience with infrastructure as code or policy as code using Terraform, CloudFormation, Bicep, ARM templates, or equivalent technologies. • Experience with regulated financial services or another highly regulated industry. • Experience supporting audit or regulatory examinations and producing audit-defensible evidence packages. • Familiarity with Jira, Confluence, SharePoint, or comparable tools used to manage requirements, evidence, reviews, approvals, and delivery status.

Expected Deliverables

New or revised cloud STIGs and supporting control documentation that meet SLG quality and governance requirements. • Documented cleanup recommendations and completed remediation of assigned STIG content. • Accurate control mappings, assessment procedures, implementation guidance, and evidence requirements. • Complete evidence packages and validation summaries for controls without automated CaC coverage. • Documented review comments, issue dispositions, stakeholder decisions, approvals, exceptions, and open dependencies. • Regular delivery-status reporting, including completed work, work in progress, blockers, and risks requiring escalation.