Corporate Risk and Compliance - Associate II

About the role

We are seeking a highly capable Level 2 Information Security professional who effectively bridges the gap between hands-on technical operations and governance. This role demands a unique combination of technical expertise across endpoint, network, and email security systems, paired with a Governance, Risk, and Compliance (GRC) mindset.

What you'll do

• Develop and maintain security baselines and configuration checklists for Windows/macOS endpoints, corporate networks, firewalls, Microsoft 365, email security
• Work with respective technical teams to perform periodic security assessments, identify gaps, and track remediation
• Perform or support vulnerability assessments and penetration testing, including validation of findings and remediation
• Prepare and maintain security assessment reports, technical documentation, SOPs, and compliance evidence
• Support internal and external audits by coordinating with Audit, Compliance, and technical teams

What you need

• 3–5 yrs of experience
• Compliance
• Network security
• Firewalls
• Office 365
• Penetration testing
• Documentation
• B.Tech or B.E.

Good to have

• SOP writing
• IAM
• Vulnerability assessment
• Cloud security
• CEH
• CCNA