Role & responsibilities
Assist in conducting Information Security Risk Assessments, asset classification, threat/vulnerability identification, and risk scoring.
Support preparation and maintenance of Risk Registers and Risk Treatment Plans.
Perform GRC and compliance assessments against ISO 27001, NIST, CIS, and applicable regulatory requirements.
Review security policies, procedures, and controls and identify gaps.
Perform security configuration reviews of firewalls, servers, network devices, IAM, databases, cloud, and security solutions.
Validate configurations against CIS Benchmarks, vendor best practices, and organizational standards.
Prepare assessment reports, compliance matrices, configuration review reports,



and remediation trackers.
Coordinate with technical teams for evidence collection, remediation tracking, and finding validation.

Required Skills
Basic knowledge of Cybersecurity, Risk Management & GRC
Understanding of ISO 27001, NIST and CIS
Knowledge of network, server, firewall, IAM and cloud security
Basic understanding of security configuration and hardening
Positive analytical, documentation and report-writing skills

Preferred Certifications ISO 27001 | Lead Auditor/Implementor | CEH

📌 Risk Assessment Analyst Cyber Security Gurugram
🏢 Sveltetech Technologies
📍 Gurugram