Analyst, Information Security (GRC)

In our ‘always on’ world, we believe it’s essential to have a genuine connection with the work you do.

Vistance is recruiting an Analyst, Information Security (GRC) to join our team based in Hyderabad!

Are you a technology professional with experience across Governance, Risk, and Compliance (GRC), including policy/standards, third-party risk management (TPRM), customer security assurance, and security standards compliance?

Are you excited by the challenge and reward of maturing the GRC function for a large, publicly traded company? Then Vistance Networks' Governance, Risk, and Compliance (GRC) program may be the right next step for you! The Security Analyst will help develop and maintain our security GRC function. You’ll work with members of an international team of GRC professionals spanning Vistance Networks' US and India offices.

How You'll Help Us Connect the World:

As a key player in Vistance Networks’ security landscape, you will collaborate with our business units, Technology, and Security teams to systematically identify security risks, catalogue them, and drive them to resolution. Your leadership in this area will be instrumental in our collective efforts to connect the world.

Your success in this role depends on several factors. First, you’ll bring domain expertise and relevant experience from your previous technology or security roles. At least one of your previous roles will have given you technical experience so that you can actively participate in discussions about risk and control effectiveness. Structured execution, critical thinking, attention to detail, and effective communication are the foundation of everything we do.

• Works with other organizational participants to implement information security policies.
• Identifies, analyzes, evaluates, and documents information security risks and controls based on established risk criteria.
• Recommends controls to mitigate identified security risks and assists with their implementation.
• Manages an exception review and approval process and ensures exceptions are documented and reviewed periodically.
• Assists with evaluating the effectiveness of the information security program by developing, monitoring, gathering, and analyzing information security and compliance metrics for management.
• Performs third-party supplier risk assessments to manage supply chain risk throughout the supplier's lifecycle. Assesses and reports on the business's risks and benefits and mandates for supplier compliance.
• Assists with review of information security sections within supplier and customer contracts, identifies opportunities, and recommends security and data privacy content accordingly.
• Applies a strong understanding of AI governance and risk management principles, including the NIST AI Risk Management Framework (AI RMF), to identify, assess, and help mitigate risks associated with the organization’s rapidly evolving use of AI.
• Supports the adoption, implementation, and continuous improvement of security and compliance frameworks, including SOC 2 and applicable ISO standards, to strengthen the organization’s security posture and enable sustainable business growth.
• Collaborates with business, technology, legal, and privacy stakeholders to translate AI, security, and compliance requirements into practical controls that support innovation and business objectives.
• Develops and delivers information security awareness sessions that equip employees to recognize threats, follow secure practices, and understand their role in protecting organizational information and systems.
• Plans and conducts phishing simulations, analyzes results and behavioral trends, and coordinates targeted education and follow-up activities to strengthen employee resilience.
• Identifies emerging attack trends, translates relevant findings into timely employee education, and communicates threat insights, program metrics, and recommended actions to senior leadership to provide effective risk visibility and support informed decision-making.
• Participates in the company’s vulnerability remediation program by collaborating with technology and business stakeholders to prioritize and track remediation activities, address risk-based exceptions, and drive measurable reduction of security risk across the organization.

Required Qualifications for Consideration:

• Minimum of 6 years of professional experience in Information Security and hands-on expertise in governance & Risk, demonstrating increased responsibility and success in each role. A bachelor’s degree or equivalent professional experience is required.
• Previous professional experience with information security or other IT/technical disciplines, with the ability to communicate with a non-technical audience about relevant domain information.
• Strong communication, analytical, and critical-thinking skills.
• Working knowledge of AI governance and risk management frameworks, including the NIST AI Risk Management Framework (AI RMF), with the ability to assess AI-related risks and recommend appropriate controls.
• Experience supporting, implementing, or assessing security and compliance programs aligned with SOC 2 and applicable ISO standards, such as ISO/IEC 27001, is expected.

You Will Excite Us If You Have:

• Previous experience working with business stakeholders to make risk trade-offs.
• Previous experience developing and tracking technical process metrics.
• Previous experience working with external vendors and customers.
• Existing domain knowledge of security GRC. Previous experience working in these areas.
• Strong communication skills.
• Preferred certifications include ISO/IEC 27001 Lead Implementer or Lead Auditor, AICPA SOC for Service Organizations certificate, ISACA AI Fundamentals or Certified in Emerging Technology credentials, and established security or GRC certifications such as CISA, CRISC, CISM, or CISSP.

Why Join Us?

Vistance Networks shapes the future of communications technology, pushing past what is possible. We deliver solutions that bring reliability and performance to a world always in motion. Our global team of innovators and employees are trusted advisors who listen to customers first, then deliver value.

If you want to grow your career alongside bright, passionate, and caring people who strive to create what's next…..come connect to your future at Vistance Networks.

Vistance Networks is an Equal Opportunity Employer (EEO), including people with disabilities and veterans.