Position : Information Security Analyst.

Experience : 1 -3 Yrs.

Location : Airoli Navi Mumbai.

Role & responsibility :

1. The candidate will work closely with the GRC Head & CISO and support various information security, compliance, audit, risk management and regulatory activities.
2. The ideal candidate should have a basic understanding of cybersecurity and information security concepts, with a robust interest in GRC, IT Audit, Compliance and Risk Management.
3. Support day-to-day activities related to the Information Security GRC program.
4. Assist in monitoring compliance with applicable information security policies, standards and regulatory requirements.
5. Support implementation and monitoring of security controls across various functions.
6. Maintain compliance trackers, control matrices, risk registers and other GRC documentation.
7. Assist in identifying compliance gaps and tracking corrective actions until closure.
8. Support internal and external information security audits.
9. Coordinate with various teams for audit evidence collection, validation and submission.
10. Maintain audit evidence and ensure documentation is complete and up to date.
11. Track audit observations, action items and remediation status.
12. Assist in control testing and assessment of control effectiveness.
13. Support preparation for customer, regulatory and third-party security assessments.
14. The candidate will get exposure to multiple security and compliance frameworks, including ISO 27001, PCI DSS, PCI 3DS, SOC 2 Type 2, ISO 42001,



NIST Cybersecurity Framework, RBI regulatory requirements, NPCI requirements, SAR / Security Assessment Requirements and other applicable information security and regulatory requirements.
15. Assist in conducting information security risk assessments.
16. Support identification, documentation and tracking of risks.
17. Assist in maintaining risk registers and mitigation plans.
18. Coordinate with relevant stakeholders for closure of identified risks and control gaps.
19. Support periodic review of security controls and compliance requirements.
20. Assist in drafting, reviewing and maintaining information security policies, standards, procedures and guidelines.
21. Ensure policies and compliance documents are periodically reviewed and updated.
22. Support preparation of management reports, dashboards and compliance status reports.
23. This is not a highly technical penetration-testing role. However, the candidate should develop a basic understanding of technical security areas such as VAPT and vulnerability management, Application Security, Network and infrastructure security, Firewall and security controls, SIEM/SOC and security monitoring, Identity and Access Management, Data protection and encryption, Endpoint security and Cloud security fundamentals.
24. The candidate will primarily be responsible for understanding the security requirement, coordinating with technical teams and validating the required evidence/control, rather than independently performing technical security testing.

📌 Information Security Analyst (Mumbai)
🏢 Kiya.ai
📍 Mumbai