It Security Associate

Associate - Information Security (GRC & Compliance)

Role Summary
We are looking for an Associate - Information Security to support Governance, Risk, Compliance (GRC), Privacy, and Customer Assurance initiatives. The role offers an excellent opportunity to build expertise in information security governance, compliance, risk management, and customer security engagements.

Key Responsibilities

• Support ISMS implementation, security governance, policies, and compliance activities.
• Assist in internal/external audits, evidence collection, and remediation tracking.
• Conduct compliance reviews and maintain security documentation.
• Support customer security questionnaires, due diligence requests, and audit preparations.
• Assist with risk assessments, risk register management, and third-party security reviews.
• Support privacy and data protection initiatives related to GDPR, DPDP, and other regulations.
• Prepare security dashboards, compliance reports, KPIs, and governance metrics.
• Drive security awareness programs and support continuous improvement initiatives.

Experience & Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.
• 2 to 5 years of experience in Information Security, GRC, Compliance, Risk Management, Audit, or IT Governance.
• Exposure to security frameworks, compliance programs, and audit activities.
• Experience working with internal stakeholders and cross-functional teams.

Desired Skills

• Information Security Governance & Compliance
• Risk Management
• Privacy & Data Protection
• Security Audits
• Third-Party Risk Management
• Customer Security Assessments
• Identity & Access Management (IAM)
• Vulnerability Management
• Security Awareness Programs

Certifications (Preferred)

• ISO 27001 Internal Auditor
• ISO 27001 Lead Auditor (Foundation/Lead Auditor)
• Other Information Security or Compliance-related certifications preferred.