Security Analyst - Risk and Policy Governance| Thane
ThaneFull-time2–5 yrsPosted 2 months ago
Mid-level cybersecurity role at Iaamcp in Thane. Needs 2+ years and a B.Tech, B.E. or M.Tech.
About the role
Identify, assess, and monitor security risks; perform risk assessments and recommend mitigation strategies. Maintain risk register and report to leadership. Develop, review, and enforce security policies aligned with frameworks (e.g., ISO 27001, NIST, CIS) and regulations (e.g., DPDP). Ensure policy compliance and deliver training.
What you'll do
- Identify, assess, and monitor security risks; perform risk assessments and recommend mitigation strategies
- Maintain risk register and report to leadership
- Develop, review, and enforce security policies aligned with frameworks (e.g., ISO 27001, NIST, CIS) and regulations (e.g., DPDP)
- Ensure policy compliance and deliver training. Support audits (SOC 2, ISO, RBI), gather evidence
- Evaluate third-party risks, review assessments, and work with procurement/legal
What you need
- Incident response
- ISO 27001
- Compliance
- Data privacy