Lead Analyst - I

Descriptions:

Technical Responsibilities and Experience (6 to 8 years of relevant experience):

• Robust understanding and practical engagement with ISO 27001:2022, NIST, SOC2 Framework
• Strong Hands-on experience in conducting and facing various IT system Audits
• Experience and knowledge of various Regulatory and Statutory bodies and guidelines such as RBI, SEBI, IRDAI, NPCI etc.
• Experience and knowledge in Documentation and Reporting capabilities such as creating, maintaining and reviewing various Policies, Procedures, Guidelines etc.
• Experience and knowledge in conducting various critical activities such as BCP / DR Drills, Phishing Simulations, Table Top Exercises, Cyber Drills.
• Strong working experience with reviews of Contracts and MSAs. Supporting various pre-sales activities such as RFP reviews.
• Hands on technical knowledge and experience with various IT related systems and Tools such as AV, EDR, Firewalls, Network Devices, WAF, Proxy etc.
• Strong knowledge and conceptual understanding of various areas such as Application Security, Infrastructure Security, Physical Security.
• Knowledge of WAFs, DDoS mitigation (e.g., Akamai), and system hardening (e.g., CIS Benchmarks)
• Strong leadership, stakeholder engagement, and cross-functional communication skills.
• Excellent communication (written and oral) and interpersonal skills is very much required
• Knowledge of the Financial landscape would be an added advantage
• Manage escalations, ensure strong documentation, and adhere to project timelines.

Qualifications:

• Bachelor’s degree in Information Security, or a related field. Master’s Degree or BE would be an additional advantage.
• Proficient in MS Office tools – Word, Excel, and PowerPoint.

Certifications: (Preferred but not mandatory)

• CISA, CISSP, ISO 27001:2022 Lead Auditor, ISO 27001:2022 Lead Implementor