Vulnerability Management & GRC Analyst - Information Security

Skills required : - Candidate with strong work experience covering IAM, vulnerability management, Application Security, incident management handling, governance, and risk and compliance. - Prior experience supporting SOC2 readiness or ISO certifications - preferred. - AWS Cloud Security knowledge - preferred. - Client interaction skills - preferred. - Security+ or CISSP certifications - preferred. - 4-7 yrs Information Security experience. - Please do not apply if you are not from Mumbai. Key Responsibilities : - Execute comprehensive vulnerability management programs, including scanning, prioritization, and remediation tracking, to minimize the attack surface of our critical financial applications. - Lead IS GRC initiatives by conducting internal audits and mapping security controls to ISO27001 standards to maintain regulatory compliance and operational excellence. - Manage Identity and Access Management (IAM) and Privileged Access Management (PAM) frameworks to ensure the principle of least privilege is enforced across all production environments. - Coordinate incident management efforts by investigating security anomalies and driving root cause analysis to prevent future occurrences and protect sensitive financial data. - Partner with software development teams to integrate application security best practices into the CI/CD pipeline, ensuring security is embedded at every stage of the development lifecycle. - Communicate security risks and compliance status to non-technical stakeholders, providing clear recommendations that align with the company's risk appetite and business goals.