Information Security & IT Governance Analyst

Role & responsibilities

Role Purpose

To support Information Security and IT Governance activities including audit coordination, ISO and PIMS gap assessments, compliance tracking, vendor risk assessments, cloud security governance, and operational security tasks. The role ensures timely closure of audit observations and strengthens the overall governance posture.

Key Responsibilities

• Coordinate internal and external audits (ISO, RBI, ITGC, IS Audit, UIDAI, TPRA, Internal Audit).
• Support ISO 27001 Gap Assessment activities and track remediation of identified gaps.
• Support PIMS (Privacy Information Management System) gap assessments and compliance tracking.
• Collect audit evidence, maintain trackers, and ensure timely closure of audit observations.
• Coordinate VAPT activities and track remediation status until closure.
• Support vendor onboarding, due diligence, and third-party risk assessments.
• Assist in AWS security control reviews and cloud governance tracking.
• Review project security checklists and maintain compliance documentation.
• Support DR, BCP, Phishing simulations, SOC coordination, BIA, MRM, ISCM activities.
• Participate in CAB meetings and track security action items.
• Support implementation and maintenance of Data Privacy framework aligned with regulatory requirements
• Review vendor agreements for data protection and privacy clauses
• Assist in conducting Cyber Security, privacy awareness and training programs

Required Skills & Qualifications

• 2 - 3 years of experience in Information Security, IT Governance, or IT Risk.
• Understanding of ISO 27001, PIMS (ISO 27701), ITGC, and regulatory compliance requirements.
• Knowledge of VAPT lifecycle and vulnerability management.
• Basic understanding of AWS security concepts.
• Strong documentation, coordination, and communication skills.
• ISO 27001:2022 Lead Auditor (LA) certification will be an added advantage
• Any relevant certifications such as CEH, Security+, CISA (added advantage)