Security Engineering Assurance Analyst

Role Description

The Security Engineering Assurance Analyst is responsible for supporting Embedded Independent Security Engineering Assurance activities across the Bank’s vendor-supported engineering operating model.

The role supports secure SDLC governance, engineering assurance reviews, release governance validation, vulnerability assurance, change assurance, audit evidence coordination, and ongoing PCIDSS and ISO27001 assurance activities across Product Governance, Engineering implementation, deployment, and release activities.

The role operates independently from engineering delivery functions to provide governance-aligned assurance visibility, implementation assurance support, and audit defensibility across Bank-owned systems and services.

Key Responsibilities

• Support Embedded Independent Security Engineering Assurance activities across engineering and implementation workflows.
• Participate in secure SDLC governance reviews and engineering assurance activities.
• Support secure coding governance reviews and engineering assurance validation activities.
• Assist with Security assurance activities relating to APIs, integrations, applications, and infrastructure changes.
• Support Security assurance reviews across change management and release governance workflows.

Qualifications

• Experience in cybersecurity, application security, Security assurance, or security governance roles
• Exposure to secure SDLC, vulnerability management, or engineering assurance activities
• Understanding of PCI-DSS, ISO27001, and secure engineering governance principles
• Experience within banking, fintech, regulated environments, or vendor-supported operating models preferred
• Familiarity with application security testing, release governance, or engineering implementation processes advantageous

<