GRC / Security Analyst

Key Responsibilities:

1. Governance, Risk, and Compliance (GRC):
• Conduct ISMS Internal audits and advocate controls, guiding teams to implement them in compliance with ISO 27001:2022.
• Develop and maintain audit checklists and documents.
• Oversee vulnerability management.
• Perform configuration audits and create security baselines as required.
• Perform risk assessments and impact analysis.
• Conduct cybersecurity and related training sessions for clients and internal teams.
• Ensure all legal and regulatory compliances related to cybersecurity (e.g., GDPR, PCI-DSS) are met.

• In-depth knowledge and experience with ISO 27001:2013/2022.
• Risk assessment and ISMS expertise.

Additional Skills:

• GDPR
• PCI-DSS
• CIS
• ISO 31000:2018

Technical Expertise:

• Experience with Vulnerability Assessment and Penetration Testing (VAPT) tools.
• Hands-on experience with Burp Suite, Kali Linux, Nessus, Nmap, and internal vulnerability assessments.

Qualifications/ Certification:

• Bachelors degree in Computer Science, Information Technology, or a related field.
• CISA (Certified Information Systems Auditor) certification.
• Lead Auditor certification for ISO 27001.
• 4-6 years of relevant work experience in GRC and security roles.

Preferred Skills:

• Knowledge of additional security standards and frameworks (e.g., NIST, PCI-DSS).
• Experience with security incident management and response.
• Familiarity with other security tools and technologies.