Role & responsibilities

- Assist in conducting Information Security Risk Assessments, asset classification, threat/vulnerability identification, and risk scoring.
- Support preparation and maintenance of Risk Registers and Risk Treatment Plans.
- Perform GRC and compliance assessments against ISO 27001, NIST, CIS, and applicable regulatory requirements.
- Review security policies, procedures, and controls and identify gaps.
- Perform security configuration reviews of firewalls, servers, network devices, IAM, databases, cloud, and security solutions.
- Validate configurations against CIS Benchmarks, vendor best practices, and organizational standards.
- Prepare assessment reports, compliance matrices, configuration review reports, and remediation trackers.
- Coordinate with technical teams for evidence collection, remediation tracking, and finding validation.

Required Skills

- Basic knowledge of Cybersecurity, Risk Management & GRC
- Understanding of ISO 27001, NIST and CIS
- Knowledge of network, server, firewall, IAM and cloud security
- Basic understanding of security configuration and hardening
- Positive analytical, documentation and report-writing skills

Preferred Certifications ISO 27001 | Lead Auditor/Implementor | CEH

📌 Risk Assessment Analyst ( Cyber Security) (Gurugram)
🏢 Sveltetech Technologies
📍 Gurugram