Skip to content

Open nowPosted 150 days ago

HSBCJP00057560 (Cybersecurity) QA and SDLC Control Analyst [nowe JD]

antalpl1,058 open roles

Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowHSBCJP00057560 (Cybersecurity) QA and SDLC Control Analyst [nowe JD]antalpl
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on antalpl's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. antalpl postings stay open a median of 1 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 150 days ago

antalpl median: 1 days open

The posting

Cyber SDLC Governance Analyst

We are looking for a Cyber SDLC Governance Analyst to support cybersecurity engineering and delivery teams in maintaining high standards across software delivery, controls compliance, and DevOps governance processes.

This role sits at the intersection of technology delivery, governance, and operational risk, helping teams adopt and follow secure and compliant software development practices within a complex enterprise environment.

Hybrid model: 6 days per month from the office in Cracow

Your responsibilities

  • Support engineering and delivery teams in adopting Software Development Lifecycle (SDLC) and deployment governance standards
  • Monitor compliance with internal delivery controls and identify gaps, risks, or process deviations
  • Coordinate and execute SDLC and deployment control reviews for cybersecurity-related applications and changes
  • Track remediation activities and support teams in resolving non-compliance findings
  • Collect, validate, and maintain audit-ready evidence related to software delivery, testing, approvals, and change processes
  • Monitor DevOps and delivery metrics, identify trends and recurring issues, and provide actionable recommendations
  • Prepare reports and dashboards for governance, risk, and management stakeholders
  • Facilitate workshops, working sessions, and stakeholder discussions across technology and cybersecurity teams
  • Create training materials, guidance documents, and process communications to improve control adoption
  • Continuously improve workflows, reporting standards, and governance processes to simplify delivery compliance

What we’re looking for

  • Experience working in Agile software delivery environments in roles such as Business Analyst, IT Control Analyst, Change Analyst, Test Analyst, Delivery Governance, or similar
  • Understanding of software delivery lifecycle processes, change management, and control frameworks
  • Experience working with governance, risk, compliance, audit, or assurance-related activities
  • Ability to manage multiple stakeholders across technology and business teams
  • Strong analytical and reporting skills with hands-on experience using Excel and presentation/reporting tools
  • Experience facilitating workshops, coordinating actions, and driving process improvements
  • Strong communication skills in English, both written and spoken

Nice to have

  • Experience with DevOps metrics, SDLC governance, or delivery assurance processes
  • Familiarity with tools such as Jira, Confluence, ServiceNow, qTest, Zephyr, or Tricentis
  • Understanding of application security concepts such as SAST, DAST, or vulnerability management
  • Experience working in regulated or highly controlled environments
  • Agile, ITIL, SAFe, or IIBA certifications
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against antalpl's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on antalpl's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    antalpl's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.