Analyst - Information Security (Security, VM & GRC)

Shift: 1:00 PM 10:00 PM (IST)
Experience: 4-6 years

Role overview

We are seeking an experienced Information Security Engineer with 4-8years of hands-on experience across multiple cybersecurity domains. The ideal candidate will have a strong foundation in Identity and Access Management (IAM), vulnerability management, application security, incident management, and governance, risk, and compliance (GRC). This role requires a proactive security professional who can collaborate with internal teams and support enterprise security initiatives in a fast-paced environment.

Key responsibilities:

• Manage and support Identity and Access Management (IAM) processes, including user provisioning, access reviews, and privilege management.
• Perform vulnerability assessments, coordinate remediation efforts, and track closure of identified security issues.
• Support application security activities, including security assessments, secure development practices, and remediation coordination.
• Participate in security incident detection, investigation, response, and post-incident analysis.
• Contribute to governance, risk, and compliance (GRC) initiatives, including risk assessments, policy management, and compliance monitoring.
• Work with cross-functional teams to implement and maintain security controls across infrastructure and applications.
• Assist in security audits, documentation, and compliance evidence collection.
• Collaborate with stakeholders to improve the organizations overall security posture.

Required qualifications

• 4-6 years of experience in Information Security / Cybersecurity.
• Strong hands-on experience in:
• Identity and Access Management (IAM)
• Vulnerability Management
• Application Security
• Security Incident Management
• Governance, Risk, and Compliance (GRC)
• Good understanding of enterprise security frameworks, security controls, and risk management practices.
• Strong analytical, problem-solving, and communication skills.

Preferred qualifications:

• Experience supporting SOC 2 readiness and/or ISO 27001 certification initiatives.
• Knowledge of AWS Cloud Security, including cloud security best practices and security controls.
• Experience interacting with clients, auditors, or external stakeholders.
• Industry certifications such as CompTIA Security+, CISSP, or equivalent.

What were looking for

• A well-rounded security professional with exposure across multiple security functions.
• Ability to work independently while collaborating effectively with global and cross-functional teams.
• Strong ownership mindset and attention to detail.
• Excellent communication and stakeholder management skills.