Cybersecurity Analyst

Location: Remote – Anywhere in India

Work Schedule: Monday to Friday

Fully Remote

Experience: 5-8 Years

We are seeking an Information Security Analyst with 3–5 years of experience across security operations, vulnerability management, and governance, risk, and compliance (GRC). The ideal candidate will have hands-on experience with security monitoring tools, incident response, and security frameworks such as SOC 2 Type II and NIST CSF.

This is a fully remote opportunity open to candidates based anywhere in India, with a Monday-to-Friday work schedule. The role involves strengthening the organization's security posture, supporting compliance initiatives, identifying and mitigating security risks, and collaborating with cross-functional teams to implement effective security practices.

Security Operations & Tooling

Manage the vulnerability management lifecycle, including scanning, risk-based prioritization, remediation tracking, and management reporting.

Support endpoint security, email security, and network monitoring tools, identifying security gaps and recommending configuration improvements.

Governance, Risk & Compliance (GRC)

Support ongoing SOC 2 Type II compliance activities, including evidence collection, control testing, documentation, and coordination with external auditors.

Assist with NIST Cybersecurity Framework (NIST CSF) assessments by mapping existing controls to framework requirements, identifying gaps, and supporting remediation efforts.

Maintain and update information security policies, standards, and procedures in collaboration with senior team members.





Conduct periodic security risk assessments and document findings in the organization's risk register.

Track identified risks, control deficiencies, and remediation actions through to closure.

Collaborate with IT, Engineering, and business stakeholders to integrate security best practices into day-to-day operations.

Support security awareness initiatives and provide guidance to employees on information security policies and practices.

Prepare transparent and concise reports on security metrics, vulnerability status, risk remediation, and compliance posture for management.

Communicate technical findings, security risks, and recommended corrective actions effectively to both technical and non-technical stakeholders.

5-8 years of experience in information security, with exposure to both technical security operations and compliance functions.

- Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, or equivalent solutions.
- Understanding of SOC 2 Trust Services Criteria and the NIST Cybersecurity Framework.
- Excellent written and verbal communication skills, with the ability to explain technical findings to non-technical audiences.

Experience supporting SOC 2 audits from preparation and evidence collection through audit completion.

Scripting or automation experience using Python or PowerShell for security tooling, analysis, and reporting.

Exposure to cloud security environments, including AWS, Microsoft Azure, or Google Cloud Platform (GCP).

Experience with GRC platforms such as Archer, ServiceNow GRC, Drata, or Vanta.

📌 Cyber Security Analyst - Fully remote (Delhi)
🏢 Cisive
📍 Delhi