MBC Technology Group (MBCTG) is seeking a motivated and detail-orientedGRC Analystto support a private-sector client engaged in modernfull-stack application development on Microsoft Azure.
This role focuses on integratingsecurity governance, risk management, and compliance practices into the software development lifecycleto ensure applications are designed, built, and deployed securely.
The GRC Analyst will work closely withsoftware engineers, DevOps teams, and security architectsto ensure that development practices align withsecure coding standards, cloud security requirements, and industry frameworks.
Key Responsibilities
- Support the development and implementation ofSecure Software Development Lifecycle (SSDLC) practicesacross full-stack development projects.
- Collaborate withsoftware engineers, DevOps teams, and architectsto embed security and compliance requirements into development workflows.
- Assist in implementingsecurity controls aligned with frameworks such as NIST SSDF, NIST CSF, and OWASP best practices.
- Participate insecure design reviews, architecture discussions, and threat modeling sessionsfor applications hosted onMicrosoft Azure.
- Assist with documenting and maintainingsecure coding standards and application security policies.
- Identify and tracksecurity risks related to application development, cloud infrastructure, and third-party components.
- Maintainrisk registers, control mappings, and compliance documentationfor SSDLC processes.
- Support vulnerability management by helping track remediation activities for issues discovered duringcode scanning, penetration testing, or security reviews.
- Assist with the implementation and monitoring ofAzure security services and controls, includingAzure Defender, Azure Policy, and identity management controls.
- Prepare documentation and evidence forsecurity assessments, internal audits, and client compliance reviews.
- Track and reportsecurity metrics for development teams, including vulnerability remediation timelines and SSDLC maturity.