Job Role: Senior Infosec Analyst
Location: Banglaore/Mumbai
Work Mode: Hybrid

Job Description:
Manage ISMS and lead technology risk and compliance initiatives within the GRC domain.

Key Responsibilities:
● Experience in IT audits, cybersecurity, or risk assessments is highly advantageous.
● Solid understanding of information security.
● Perform vendor/supplier InfoSec audit and third party vendor risk assessments.
● Address regulatory compliance needs in technology risk.
● Draft compliance reports, summarize findings, and coordinate remediation.
● Comfortable identifying issues, assessing risks, and developing practical remediation plans.
● Developing and refining GRC policies, procedures, and frameworks to ensure alignment with organizational goals, regulatory requirements, and industry standards.
● Monitoring regulatory requirements and ensuring the organization's activities comply with applicable laws, regulations, and standards. This includes overseeing compliance audits and assessments.




● In-depth knowledge of cybersecurity GRC frameworks, regulations, and industry best practices (e.g., ISO 27001, NIST Cybersecurity Framework, etc).
● Good communication and presentation skills, enabling you to articulate complex cybersecurity concepts to both technical and non-technical stakeholders.
● Extensive experience in risk assessment, compliance management, governance support.
● Proficiency in utilizing industry-standard GRC security tools, technologies, and methodologies.
● Information and privacy trainings and awareness across the organization thru conventional, online trainings and phishing simulations
● Outstanding problem-solving skills and a strategic, analytical mindset, and be able to decipher the complex GRC landscapes.
● Bachelor's degree in Computer Science, Information Security, or a related field. Advanced degrees or certifications (e.g., CISSP, CISM, CISA, and ISO) are highly desirable.

📌 Senior Information Security Analyst (India)
🏢 Quantiphi
📍 India