Job Description :Shift : 1:00 PM - 10:00 PM (IST)Role Overview :We are seeking an experienced Information Security Engineer with 4 to 8 years of hands-on experience across multiple cybersecurity domains. The ideal candidate will have a strong foundation in Identity and Access Management (IAM), vulnerability management, application security, incident management, and governance, risk, and compliance (GRC). This role requires a proactive security professional who can collaborate with internal teams and support enterprise security initiatives in a fast-paced environment.Key Responsibilities :- Manage and support Identity and Access Management (IAM) processes, including user provisioning, access reviews, and privilege management.- Perform vulnerability assessments, coordinate remediation efforts, and track closure of identified security issues.- Support application security activities, including security assessments, secure development practices, and remediation coordination.- Participate in security incident detection, investigation, response, and post-incident analysis.- Contribute to governance, risk, and compliance (GRC) initiatives, including risk assessments, policy management, and compliance monitoring.- Work with cross-functional teams to implement and maintain security controls across infrastructure and applications.- Assist in security audits, documentation,



and compliance evidence collection.- Collaborate with stakeholders to improve the organization's overall security posture.Required Qualifications :- 4 to 8 years of experience in Information Security / Cybersecurity.Strong hands-on experience in :1. Identity and Access Management (IAM)2. Vulnerability Management3. Application Security4. Security Incident Management5. Governance, Risk, and Compliance (GRC)- Positive understanding of enterprise security frameworks, security controls, and risk management practices.- Strong analytical, problem-solving, and communication skills.Preferred Qualifications :- Experience supporting SOC 2 readiness and/or ISO 27001 certification initiatives.- Knowledge of AWS Cloud Security, including cloud security best practices and security controls.- Experience interacting with clients, auditors, or external stakeholders.- Industry certifications such as CompTIA Security+, CISSP, or equivalent.What We Are Looking For :- A well-rounded security professional with exposure across multiple security functions.- Ability to work independently while collaborating effectively with global and cross-functional teams.- Strong ownership mindset and attention to detail.- Excellent communication and stakeholder management skills. (ref:hirist.tech)

📌 Information Security Analyst - GRC Tools (Mumbai)
🏢 GRAVITAS TECHNOLOGY PRIVATE
📍 Mumbai