Cybersecurity & GRC Analyst (SOC / IT Audit / Cloud Security)

Key Responsibilities:
Cybersecurity & SOC Operations:Monitor security alerts and events across IT and cloud infrastructure using SIEM tools.Investigate and respond to security incidents including phishing, malware, unauthorized access, etc.Develop and maintain incident response procedures and escalation protocols.Conduct threat intelligence and vulnerability assessments on-prem and in the cloud.Cloud Security:Implement and monitor cloud security best practices (AWS, Azure, GCP).Manage IAM (Identity and Access Management), encryption, security groups, and cloud firewall rules.Perform security assessments on cloud applications and infrastructure.Ensure compliance with shared responsibility models across different cloud service providers.GRC & Compliance:Develop, implement, and audit security policies based on frameworks like ISO 27001, NIST, SOC 2, and GDPR.Conduct risk assessments and internal audits to identify and address security gaps.Ensure cloud and on-prem infrastructure aligns with regulatory and client compliance requirements.IT Audits & Reporting:Prepare for and support external audits such as ISO 27001, SOC 2, and client-specific reviews.Document processes, create audit trails, and present risk mitigation plans.Maintain detailed records of audit findings and remediation actions.Qualifications:Bachelor's degree in Computer Science, Information Security, or a related field.2-5 years of experience in cybersecurity, cloud security, GRC, or IT audits.Working knowledge of major cloud platforms: AWS, Azure, or GCP.Experience with SIEM tools (e.g., Splunk, QRadar, Microsoft Sentinel) and endpoint security solutions.Understanding of cloud compliance standards: ISO 27017, CSA, CIS Benchmarks.Familiar with GRC platforms such as RSA Archer, ServiceNow GRC, etc.Strong documentation, reporting, and communication skills.