Information Security and Compliance Analyst

Responsibilities

• Draft, coordinate, and monitor IT processes and policies to ensure compliance as per the IT Act, regulatory bodies (e. g. RBI, SEBI, GDPR, UIDAI, etc. ), and info security. (ISM) guidelines and other applicable laws concerning Technology, in coordination with internal and external stakeholders.
• Prepare and update business-wise IT infra details required by the Compliance/Legal teams for regulatory filings and 3rd party audits.
• Conduct vendor risk assessment audits and ensure identified gaps are proactively filled.
• Introduce new processes and policies by conducting market studies and surveys relevant to our business.
• Plan, formulate, coordinate, implement, and monitor the cyber crisis management plan (CCMP).
• Incident Management and Resolution.
• Interface with external auditors and set up processes to ensure all Infosec audits go smoothly
• Formulate, implement, review, and monitor BCP.
• Assisting the team in conducting the Technology Committee.
• Assisting the Risk Officer in conducting independent assessments of the business functions.
• Provide timely data for the Risk Management Committee.
  

Requirements

• 4-6 years of experience, including being SPOC for Infosec audits.
• In-depth knowledge of technology, security, risk, and compliance best practices.
• Strong capability in interfacing with both technology and business teams.
• Detailed understanding of security monitoring, threat intelligence, and vulnerability management.
• A self-driven attitude with a strong sense of ownership.
• Experience with RBI and/or SEBI (preferred) audits is a big plus.