Security Requirements Alignment: Translate contractual and regulatory security requirements into actionable controls aligned with industry frameworks (e.g., ISO 27001, NIST, CIS).
Risk Assessment & Gap Analysis: Evaluate existing security controls, identify gaps or weaknesses, and assess risks associated with non-compliance or control failure.
Mitigation Strategy Development: Recommend and support the implementation of appropriate mitigation measures to address identified risks and improve security posture.
Stakeholder Engagement: Collaborate with internal teams, clients, and third-party vendors to ensure security expectations are clearly understood and met.
Security Assurance Reviews: Conduct assurance activities such as control testing, documentation reviews, and evidence validation to confirm compliance with agreed standards.
Policy & Process Improvement: Contribute to the development and refinement of security policies, procedures, and governance models to enhance operational resilience.
Audit & Compliance Support: Assist with internal audits, providing evidence and insights to demonstrate compliance with contractual and regulatory obligations.
Reporting & Documentation: Produce clear, concise reports and dashboards that communicate findings, risks, and recommendations to technical and non-technical audiences.
At Capgemini, you can bring your whole self to work. Inclusivity is part of our everyday culture, and we strive to create a representative and welcoming environment for all.
