Junior Cyber Security Compliance Analyst

Job Description

Role summary:

Responsible for supporting the Group IT Security team in managing cybersecurity compliance activities across MET Group. The role focuses on cybersecurity due diligence (KYC), internal and external audit support, and cybersecurity evaluations of partners, vendors, and assets. The analyst will ensure that MET Group's cybersecurity posture meets regulatory, contractual, and internal policy requirements.

Essential responsibilities:

• Conduct cybersecurity due diligence assessments on new and existing counterparties, vendors, and partners as part of the onboarding and periodic review process.
• Assess and classify counterparty cyber risk levels according to internal policies and regulatory requirements. Implement/develop/configure SIEM use cases.
• Support the preparation and execution of internal and external cybersecurity audits, including NIS2, CER, and regulatory inspections.
• Liaise with internal audit, legal, and compliance teams to ensure cohesive audit readiness.
• Participate in cybersecurity maturity assessments and gap analyses for MET Group entities, assets, and newly acquired companies.
• Assist in benchmarking cybersecurity practices against MET Group standards, industry frameworks and regulatory requirements.
• Monitor and track compliance with MET Group's Information and Cyber Security Policy and related guidelines across entities.
• Contribute to regulatory compliance monitoring related to NIS2 and sector-specific regulations.

Qualifications

• Fresh graduate or 1–2 years of experience in cybersecurity, compliance, audit, or risk management.
• Basic understanding of cybersecurity frameworks and standards.
• Familiarity with KYC/due diligence processes and third-party risk assessment concepts.
• Strong analytical and organizational skills with excellent attention to detail.
• Ability to manage multiple tasks, track deadlines, and maintain accurate documentation.
• Very good English language skills, both verbal and written

Advantages

• Professional experience in an international / multi-cultural business environment.
• Practical experience with virtual teamwork and cross-country collaboration.
• Basic understanding of cybersecurity frameworks and standards.
• Familiarity with KYC/due diligence processes and third-party risk assessment concepts.
• Strong analytical and organizational skills with excellent attention to detail.
• Ability to manage multiple tasks, track deadlines, and maintain accurate documentation.
• Excellent problem-solving, troubleshooting, reasoning skills.

Additional Information