Technical Graduate Trainee – Cybersecurity & GRC

Join our agile Engineering team as a Technical Graduate Trainee focused on Cybersecurity and Governance, Risk & Compliance (GRC). This entry-level role offers recent graduates the opportunity to work alongside seasoned security professionals, contribute to ISO 27001 initiatives, and gain hands-on experience with leading GRC products while building a strong foundation for a long-term career in information security.

Responsibilities:

1. Assist in the implementation, maintenance, and continuous improvement of the company’s ISO 27001 Information Security Management System (ISMS).
2. Support internal and external security audits, gathering evidence and tracking remediation actions.
3. Collaborate with cross-functional engineering teams to embed security best practices throughout the software development lifecycle.
4. Conduct preliminary risk assessments and document security controls in line with established frameworks.
5. Contribute to GRC product certification projects by preparing documentation, test plans, and compliance reports.
6. Monitor security alerts and assist in incident response and root-cause analysis.
7. Research emerging cyber threats, technologies, and industry standards to keep the team informed.
8. Create clear, concise security documentation, policies, and training materials for internal stakeholders.

Requirements:

1.



Bachelor’s degree in Computer Science, Information Security, Engineering, or a closely related field (or equivalent proven knowledge).
2. 0–1 year of professional experience; relevant internships, projects, or coursework in cybersecurity are highly valued.
3. Foundational understanding of information security principles and the ISO 27001 standard.
4. Basic familiarity with common cybersecurity frameworks and controls (e.g., NIST, CIS).
5. Strong analytical, problem-solving, and documentation skills.
6. Excellent written and verbal communication abilities with a keen attention to detail.
7. Eagerness to pursue skilled certifications such as CISA or CISSP.
8. Legal authorization to work in the hiring country and ability to work on-site or in a hybrid model as required.

Nice to Have:

1. Hands-on experience with GRC or security tooling (e.g., risk registers, vulnerability scanners, SIEM).
2. Exposure to secure coding practices or software development lifecycles.
3. Scripting or programming skills in languages such as Python, PowerShell, or Bash.
4. Participation in cybersecurity competitions, hackathons, or relevant student organizations.
5. Familiarity with cloud security concepts and platforms (AWS, Azure, GCP).
6. Any progress toward certifications such as ISO 27001 Lead Implementer, CISA, CISSP, or similar.

📌 Technical Graduate Trainee (Bengaluru)
🏢 NTT Data Group
📍 Bengaluru