Senior Security Analyst

KEY RESPONSIBILITIES

Governance, Risk & Compliance

• Lead and provide strategic advisory support for compliance with PCI-DSS, ISO 27001, RBI guidelines, J-SOX, and other applicable regulatory frameworks.
• Design, implement, and continuously enhance the Information Security & GRC program, including policies, procedures, controls, awareness initiatives, and monitoring mechanisms.
• Own and manage enterprise-wide risk assessments, vulnerability management activities, and compliance gap analyses.

Audit & Assurance

• Plan and conduct internal audits across business units, suppliers, and vendors to assess information security and compliance maturity.
• Act as the primary point of contact for internal, external, and third-party audits, including audit coordination, evidence preparation, and closure of audit findings.
• Review and analyze SOC monitoring outputs and VAPT reports, identify non-compliance issues, and drive remediation in collaboration with technology and business teams.

Leadership & Collaboration

• Lead, mentor, and guide junior GRC / Information Security team members, ensuring effective task allocation and continuous skill development.
• Collaborate closely with IT, Engineering, Legal, Compliance, Risk, and Business stakeholders to embed security best practices into organizational processes and projects.
• Prepare and present clear, concise risk and compliance reports to senior management and leadership.

Awareness & Continuous Improvement

• Design and deliver Information Security awareness and training programs across the organization.
• Track regulatory changes, emerging cyber threats, and industry best practices to continuously enhance the organizations cybersecurity posture.
• Support the implementation and optimization of GRC tools, risk registers, and audit management platforms.