Capco, a Wipro company, is a global technology and management consulting firm. Awarded with Consultancy of the year in the British Bank Award and has been ranked Top 100 Best Companies for Women in India 2022 by Avtar & Seramount. With our presence across 32 cities across globe, we support 100+ clients across banking, financial and Energy sectors. We are recognized for our deep transformation execution and delivery.
🏢 About Capco
You will work on engaging projects with the largest international and local banks, insurance companies, payment service providers and other key players in the industry. The projects that will transform the financial services industry.
🎯 The Role
Innovative thinking, delivery excellence and thought leadership to help our clients transform their business. Together with our clients and industry partners, we deliver disruptive work that is changing energy and financial services.
✅ Key Responsibilities
Develop, maintain, implement, or assess STIGs, CIS Benchmarks, secure configuration baselines, hardening guides, or equivalent technical security standards.
Provide practical security knowledge across GCP, AWS, and Azure, with strong working experience in at least two of the three cloud platforms.
Strong understanding of cloud security concepts across identity and access management, networking, compute, containers, serverless services, data protection, encryption and key management, logging, monitoring, vulnerability management, and platform governance.
Support manual control validation, attestation, evidence collection, remediation tracking, exception handling, or control approval workflows where automated validation is unavailable.
Interpret cloud-provider documentation and convert complex technical content into concise, testable, and auditable requirements.
Work independently, manage multiple assigned deliverables, incorporate review feedback, and maintain accurate status reporting in an Agile delivery environment.
📌 Required Qualifications
Seven or more years of relevant experience in information security, cloud security, security architecture, security engineering, technology risk, control assessment, or security standards development.
Demonstrated experience developing, maintaining, implementing, or assessing STIGs, CIS Benchmarks, secure configuration baselines, hardening guides, or equivalent technical security standards.
Practical security knowledge across GCP, AWS, and Azure, with strong working experience in at least two of the three cloud platforms and the ability to research requirements for the third.
Strong understanding of cloud security concepts across identity and access management, networking, compute, containers, serverless services, data protection, encryption and key management, logging, monitoring, vulnerability management, and platform governance.
Working knowledge of Azure Policy, Wiz, AWS Service Control Policies, GCP Organization Policies, CSPM capabilities, and automated configuration or compliance assessment approaches.
Experience reviewing technical evidence and determining whether it satisfies documented control requirements and assessment procedures.
Knowledge of NIST SP 800-53, CIS Controls and Benchmarks, ISO/IEC 27001, zero trust principles, and risk-based control design.
Strong technical writing, analysis, organization, and stakeholder-management skills.
⭐ Desirable Experience
Cloud or security certification such as CCSP, CISSP, AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or Google Professional Cloud Security Engineer.
Experience in standards and lifecycle governance, security policy, control engineering, cloud governance, or technical control testing.
Experience with infrastructure as code or policy as code using Terraform, CloudFormation, Bicep, ARM templates, or equivalent technologies.
Experience with regulated financial services or another highly regulated industry.
Experience supporting audit or regulatory examinations and producing audit-defensible evidence packages.
Familiarity with Jira, Confluence, SharePoint, or comparable tools used to manage requirements, evidence, reviews, approvals, and delivery status.
🎁 Benefits
Capco has a tolerant, open culture that values diversity, inclusivity, and creativity. With no forced hierarchy at Capco, everyone has the opportunity to grow as we grow, taking their career into their own hands. We believe that diversity of people and perspective gives us a competitive advantage.
