Analyst - Information Security (Security, VM & GRC) (Mumbai)

Shift: 1:00 PM 10:00 PM (IST) Experience: 4-6 years Role overview We are seeking an experienced Information Security Engineer with 4-6 years of hands-on experience across multiple cybersecurity domains. The ideal candidate will have a strong foundation in Identity and Access Management (IAM), vulnerability management, application security, incident management, and governance, risk, and compliance (GRC) . This role requires a proactive security qualified who can collaborate with internal teams and support enterprise security initiatives in a fast-paced environment. Key responsibilities: - Manage and support Identity and Access Management (IAM) processes, including user provisioning, access reviews, and privilege management. - Perform vulnerability assessments , coordinate remediation efforts, and track closure of identified security issues. - Support application security activities, including security assessments, secure development practices, and remediation coordination. - Participate in security incident detection, investigation, response, and post-incident analysis . - Contribute to governance, risk, and compliance (GRC) initiatives, including risk assessments, policy management, and compliance monitoring. - Work with cross-functional teams to implement and maintain security controls across infrastructure and applications. - Assist in security audits, documentation, and compliance evidence collection. - Collaborate with stakeholders to improve the organizations overall security posture. Required qualifications - 4-6 years of experience in Information Security / Cybersecurity . - Strong hands-on experience in: - Identity and Access Management (IAM) - Vulnerability Management - Application Security - Security Incident Management - Governance, Risk, and Compliance (GRC) - Good understanding of enterprise security frameworks, security controls, and risk management practices. - Strong analytical, problem-solving, and communication skills. Preferred qualifications: - Experience supporting SOC 2 readiness and/or ISO 27001 certification initiatives. - Knowledge of AWS Cloud Security , including cloud security best practices and security controls. - Experience interacting with clients, auditors, or external stakeholders . - Industry certifications such as CompTIA Security+ , CISSP , or equivalent. What were looking for - A well-rounded security professional with exposure across multiple security functions. - Ability to work independently while collaborating effectively with global and cross-functional teams. - Strong ownership mindset and attention to detail. - Excellent communication and stakeholder management skills. .