Senior Cyber Engineer - Governance

Overview

Senior Cyber Engineer – Governance is the technical anchor for Maersk's Cyber Assurance transformation, building scalable, evidence-based methods to validate whether critical cyber controls are working across cloud, identity, network, platforms, applications and operational technology.

What you'll do

• Translate control objectives and intended designs into repeatable assurance procedures, using machine-testable approaches where suitable and well-defined human testing where not.
• Design reusable approaches for collecting, validating and correlating evidence from authoritative source systems.
• Help develop the Assurance Engine by combining trusted evidence, automation, analytics and assurance judgement into scalable capabilities.
• Identify where automation and AI can improve coverage, consistency and insight without weakening evidence quality or human accountability.
• Independently assess whether controls are appropriately designed, implemented and operating effectively.
• Perform technical validation across complex environments and challenge control assertions where evidence is incomplete or insufficient.
• Identify systemic weaknesses, dependencies, coverage gaps and blind spots, performing root-cause analysis where required, and translate findings into clear assurance conclusions and targeted actions.
• Create repeatable ways to assess control effectiveness, confidence, coverage and blind spots (continuous control assurance).
• Test whether controls work together across realistic threat scenarios and control chains (threat-led assurance).
• Provide technical expertise and reusable trusted evidence for certifications, audits and customer assurance.
• Partner with Cyber Operations, Architecture, Risk, Technology, Data, AI and control owners to obtain reliable facts while retaining independent assurance judgement.
• Communicate complex technical findings, root causes and control effectiveness outcomes in language that supports risk, investment and remediation decisions.
• Provide credible, balanced challenge to technical and non-technical stakeholders, including leadership, customers, auditors and external assessors.

What you'll need

• Recognised expertise in one or more areas such as cloud security, identity and access management, network security, applications and APIs, infrastructure and platforms, detection engineering, data protection, cryptography or operational technology.
• Ability to connect a control objective to intended design, technical implementation and operational effectiveness, and recognise dependencies or weaknesses across the wider control chain.
• Experience validating controls through configuration review, architecture review, technical testing, source-system data or other authoritative evidence.
• Ability to shape practical automation, API or data-integration approaches that make assurance more repeatable and scalable.
• Engineering credibility (hands-on expertise in every tool is not required).
• Confidence to challenge constructively, explain the limits of available evidence and turn complex findings into clear outcomes and actionable insight.
• Ability to work across operations, architecture, engineering, risk, data and business teams, building trust while maintaining the independence of the assurance conclusion.

Nice to have

• Familiarity with common security control frameworks and assurance standards, such as NIST CSF, ISO 27001/27002, SOC 2 and Zero Trust principles.
• Experience in modern enterprise environments spanning cloud, identity, networks, applications, APIs, infrastructure, data platforms and operational technology.
• Experience in assurance, audit, penetration testing, control testing, security architecture review or technical risk assessment.
• Experience with evidence models, data quality, lineage, analytics, automation or AI-assisted analysis in a security context.

Details

• Location: Bengaluru, India (560064).