Cybersecurity - Risk & Compliance Analyst

As a GRC Analyst, you will leverage your experience and knowledge of business & industry security issues / trends and will advise our clients on the cyber risks applicable to their business domains. You will be accountable for ensuring a quality delivery of service as per the terms mentioned in the engagement letter.

Your role would require you to engage with multiple stakeholders across different domains to drive the risk & compliance initiatives. You will add value to our clients security posture by identifying areas of improvement to both processes and systems, reviewing and reporting on the adherence to security controls and by advising our clients on how they can further strengthen their security controls.

You will partner with our clients by carrying out third party security due diligence, information security awareness programs and supporting the leadership in taking educated decisions by providing clear cost benefit analysis of proposed security enhancements.

2 years years of experience in information security governance including experience in carrying out quantified risk assessments, third-party risk assessments, defining and managing information security processes, performing information security audits, and allied areas.

Bachelors / Masters Degree in Cybersecurity

• Certifications such as ISO27001 Lead Auditor/ Lead Implementer, ISO22301 Lead Auditor/ Lead Implementer

• Work experience or conceptual understanding of cloud platform with the ability to suggest best practices or carry out audits on the environment.

• Sound knowledge of security control frameworks such as ISO27001, PCI, HIPAA, SOC 1/2, NIST Cyber Security Framework, Cloud Compliance Framework.

• Excellent problem solving, interpersonal, and communication skills

• A team player and a go-getter who thrives for success