Vulnerability Management & GRC Analyst - Information Security
Description
Skills required :
- Candidate with strong work experience covering IAM, vulnerability management, Application Security, incident management handling, governance, and risk and compliance.
- Prior experience supporting SOC2 readiness or ISO certifications - preferred.
- AWS Cloud Security knowledge - preferred.
- Client interaction skills - preferred.
- Security+ or CISSP certifications - preferred.
- 4-7 yrs Information Security experience.
- Please do not apply if you are not from Mumbai.
Key Responsibilities :
- Execute comprehensive vulnerability management programs, including scanning, prioritization, and remediation tracking, to minimize the attack surface of our critical financial applications.
- Lead IS GRC initiatives by conducting internal audits and mapping security controls to ISO27001 standards to maintain regulatory compliance and operational excellence.
- Manage Identity and Access Management (IAM) and Privileged Access Management (PAM) frameworks to ensure the principle of least privilege is enforced across all production environments.
- Coordinate incident management efforts by investigating security anomalies and driving root cause analysis to prevent future occurrences and protect sensitive financial data.
- Partner with software development teams to integrate application security best practices into the CI/CD pipeline, ensuring security is embedded at every stage of the development lifecycle.
- Communicate security risks and compliance status to non-technical stakeholders, providing clear recommendations that align with the company's risk appetite and business goals.