Senior Information Security Analyst

Position Title: Senior Information Security Analyst

CTC: 12-13 LPA

Exp: 5+yr

Location: Bangalore (CV Raman Nagar)

Working Mode: Onsite

Woking days: Monday to Friday
Working Timings: 9 AM to 6 PM

Primary Skill: External and internal IT audits , ISO 27001, SOX, IT General Controls (ITGC) assessments, cybersecurity frameworks, NIST, and PCI DSS

Qualification: BE/ B.Tech/BSC /BCA/ M.Tech/ ME

Key Responsibilities:

• Audit & Compliance:
  

• Conduct external and internal IT audits following ISO 27001, SOX, and other regulatory frameworks.
  

• Perform IT General Controls (ITGC) assessments and ensure compliance with cybersecurity frameworks such as NIST 2.0, PCI DSS, and ISO 27001:2022.
  

• Identify control deficiencies and recommend corrective actions to improve security posture.
  

• Conduct Cyber Maturity Assessments and risk evaluations.
  

• Conducting GAP assessments.
  

• Client Engagement & Advisory:
  

• Act as a primary contact for client engagements, audit planning, and risk advisory services.
  

• Lead and facilitate client meetings, walkthroughs, and audit discussions.
  

• Provide strategic recommendations, develop security roadmaps, and present findings to senior stakeholders.
  

• Risk Management & Governance:
  

• Evaluate risk management practices and ensure mitigation of security vulnerabilities.
  

• Assist in the implementation of security best practices, policies, and frameworks.
  

• Manage third-party/vendor risk assessments and ensure compliance.
  

• Reporting & Documentation:
  

• Prepare audit reports, risk assessments, and compliance documentation.
  

• Develop and maintain Standard Operating Procedures (SOPs) for future audits.
  

• Track remediation progress and ensure implementation of security measures.
  

Technical Skills:

• Technical Expertise:
  

• Hands-on experience in SOX IT controls, ITGC, risk assessment, and compliance audits.
  

• Strong knowledge of ISO 27001, NIST CSF, PCI DSS, and other cybersecurity frameworks.
  

• Proficiency in security audits, control testing, and compliance management.
  

Competencies:

• Excellent communication and stakeholder management skills.
  

• Strong analytical and problem-solving abilities.
  

• Ability to work independently and manage multiple audit engagements.
  

• Exposure to multi-client audit engagements in GRC, IT Risk, and Cybersecurity frameworks.