Cyber Security & GRC Specialist

About the Company

Our client is a product-focused organization founded by experienced technocrats with over 14 years of collaboration and a combined industry experience of 100+ years. The company offers a comprehensive portfolio of integrated IT solutions designed to simplify and automate complex IT environments.

Responsibilities

• Build the organization’s GRC framework from the ground up
• Design and implement ISMS aligned with ISO 27001
• Lead ISO 27001 / SOC 2 readiness and certification processes
• Develop and document security policies, SOPs, and procedures
• Conduct risk assessments, maintain risk registers, and perform gap analysis
• Implement and manage AWS security best practices including IAM, KMS, GuardDuty, CloudTrail, and WAF
• Conduct and coordinate Vulnerability Assessment & Penetration Testing (VAPT)
• Manage remediation tracking and closure
• Implement and manage SIEM tools, IDS/IPS, and endpoint security solutions
• Develop incident response playbooks and support disaster recovery planning

Requirements

• 4–5 years of experience in Cyber Security roles
• Strong hands-on experience in GRC & Compliance implementation
• Strong hands-on experience in ISO 27001 or SOC 2 frameworks
• Strong hands-on experience in WAF configuration and management
• Strong hands-on experience in VAPT execution and remediation tracking
• Experience in AWS security controls
• Good knowledge of network security and firewalls
• Bachelor’s degree in IT, Computer Science, Engineering, or equivalent

Preferred Qualifications

• ISO 27001 Lead Implementer / Auditor
• AWS Security Specialty
• CISM, CISSP, or CCSP