Security Analyst - Risk and Policy Governance| Thane
Posted Updated 5
views
Summary
Security Analyst who assesses risks, enforces ISO 27001/NIST policies, ensures compliance with DPDP and RBI regulations, and supports audits and incident response.
Ability to learn, understand and work with team to gain insight into risk, compliance and awareness functions.
- Identify, assess, and monitor security risks; perform risk assessments and recommend mitigation strategies.
- Maintain risk register and report to leadership.
- Develop, review, and enforce security policies aligned with frameworks (e.g., ISO 27001, NIST, CIS) and regulations (e.g., DPDP).
- Ensure policy compliance and deliver training. Support audits (SOC 2, ISO, RBI), gather evidence, and document controls. Participate in security governance programs and define risk KPIs.
- Evaluate third-party risks, review assessments, and work with procurement/legal.
- Support incident response through policy oversight and post-incident review.
- Promote security awareness and maintain all documentation and reports.
M.Tech/B.Tech Or Equivalent Bachelors Degree
Min Experience: 2 years
Max Experience: 5 years