IT Security Analyst

Experience: As per company requirements. Industry: NBFC / Financial Services. Location: As per company requirements. Employment Type: Full-Time.

Role Summary

We are looking for an IT Security Analyst to help protect the organisations systems, data, and customers from cyber threats. The role involves security monitoring, vulnerability management, incident response, access control reviews, and supporting compliance with RBI cyber security requirements applicable to NBFCs. The person will work closely with the IT, PMO, GRC, and business teams.

Key Responsibilities

• Security Monitoring
  • Monitor security alerts and logs from SIEM, firewalls, endpoint security, email security, and other tools, and investigate suspicious activity.
  • Analyse and triage alerts to separate genuine threats from false positives, and escalate as needed.
  • Coordinate with the SOC (in-house or outsourced) and follow up on reported incidents and alerts.
  • Tune monitoring rules and use cases to improve detection and reduce noise.
• Incident Response
  • Respond to security incidents such as phishing, malware, unauthorised access, and data leakage, following the incident response plan.
  • Contain, investigate, and document incidents, including root cause analysis and corrective actions.
  • Support timely reporting of cyber incidents to RBI and CERT-In as per regulatory timelines, in coordination with the CISO.
  • Maintain an incident register and share lessons learned to prevent recurrence.
• Vulnerability Management
  • Conduct or coordinate periodic vulnerability assessments and penetration testing (VAPT) for applications, servers, network devices, and cloud environments.
  • Review VAPT reports, prioritise findings by risk, and track remediation with application owners and vendors.
  • Verify closure of vulnerabilities through re-testing before marking them closed.
  • Monitor security advisories and threat intelligence for vulnerabilities affecting the organisations systems, and drive timely patching.
• Access and Identity Security
  • Conduct periodic user access reviews for critical applications, servers, and databases.
  • Monitor privileged and admin accounts and ensure privileged access is controlled and logged.
  • Ensure onboarding, role change, and offboarding access requests follow the approved process.
  • Review MFA coverage and enforce strong authentication for critical systems.
• Endpoint, Network, and Cloud Security
  • Manage and review configurations of security tools such as endpoint protection (EDR/antivirus), DLP, firewalls, email security, and web filtering.
  • Review firewall rules periodically and remove unused or overly permissive rules.
  • Support secure configuration (hardening) of servers, endpoints, and cloud resources as per security baselines.
  • Review security of cloud environments for misconfigurations and excessive permissions.
• Application Security Assessments
  • Participate in security reviews of new applications, system changes, and projects before go-live.
  • Conduct security risk assessments of third-party vendors and service providers during onboarding and periodically after.
  • Review security clauses in vendor contracts and outsourcing arrangements in coordination with GRC and Legal.
• Compliance and Audit Support
  • Support compliance with RBI requirements on IT governance, cyber security, and IT outsourcing, as well as the DPDP Act, 2023.
  • Provide evidence and responses for IS audits, RBI inspections, internal audits, and ISO 27001 audits (if applicable).
  • Track closure of security-related audit observations.
  • Help draft and update information security policies, standards, and SOPs.
• Business Continuity and Security Awareness
  • Support BCP and DR drills from a security perspective and document outcomes.
  • Run security awareness programmes, phishing simulations, and training sessions for employees.
  • Prepare regular reports for the CISO on alerts, incidents, vulnerabilities, access reviews, and remediation status.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

Disclaimer: The job location mentioned in this description is based on publicly available information or company headquarters. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.