Analyst / Senior Analyst - IT GRC

About Company:

BDO is a global network of professional services firms with a presence in over 166 countries, revenue of over USD 14 billion, and experience of over 60 years. It's a leading service provider for the mid-markets with client service at its heart.

BDO India Services Private Limited (or BDO India) is the India member firm of BDO International. BDO India offers strategic, operational, accounting and tax, and regulatory advisory & assistance for both domestic and international organizations across a range of industries. BDO India is led by more than 300+ Partners & Directors with a team of over 10,000 professionals operating across 14 cities and 20 offices. We expect to grow sizably in the coming 3-5 years, adding various dimensions to our business and multiplying and increasing the current team size multi-fold.

Job Summary:

We are looking for a motivated Cybersecurity Analyst to join our Cybersecurity Practice in Mumbai. The role is suitable for professionals with 1 to 2 years of experience in cybersecurity, with hands-on exposure to Governance, Risk and Compliance (GRC) and a foundational understanding of cloud and technical security domains.

The role will provide exposure to diverse cybersecurity engagements, regulatory frameworks, cloud security assessments, and client-facing consulting assignments

Roles & Responsibilities:

• Support delivery of cybersecurity consulting engagements across GRC, regulatory compliance, risk and security assessment domains
• Perform assessments and control reviews aligned with frameworks and regulations such as ISO 27001, RBI, SEBI, IRDAI, ITGC and ITAC
• Assist in conducting risk assessments, gap assessments, control testing and compliance reviews.
• Prepare and maintain assessment workpapers, reports, trackers and other project documentation.
• Interact with client stakeholders for information gathering, walkthroughs, evidence reviews and closure of assessment requirements.
• Support development of policies, procedures, risk registers, compliance matrices and remediation recommendations.
• Assist with cloud security reviews across AWS, Azure and/or GCP, based on defined security and compliance requirements.

Educational Qualifications & Experience:

• Bachelors degree in law, Information Technology, Cybersecurity, Business, or a related field.
• Privacy-related certifications (e.g., CIPP/E, CIPP/US, CIPM, CIPT, or equivalent).
• 1 to 2 years of experience in cybersecurity, preferably within consulting, audit, risk or compliance roles.

Skills & Competencies:

• Good hands-on exposure to GRC activities, including risk assessments, compliance assessments, control testing and/or IT audits.
• Foundational understanding of cybersecurity concepts, IT general controls, information security risks and controls.
• Working knowledge of one or more frameworks/regulations such as ISO 27001, RBI, SEBI, IRDAI, ITGC or ITAC.
• Good analytical, documentation and communication skills with the ability to work in a client-facing environment
• Basic understanding of AWS, Azure and/or GCP security concepts and controls is an added advantage.
• Exposure to VAPT, vulnerability management or penetration testing concepts is an added advantage.
• Certifications such as ISO 27001, Security+, AWS/Azure fundamentals or equivalent would be preferred.

Behavioural Attributes:

• High level of confidentiality and discretion.
• Ability to perform under pressure and manage multiple competing priorities.
• Customer-service-oriented with a positive attitude.
• Strong problem-solving skills and ability to work collaboratively in a team.