Cyber Security Analyst - Bengaluru

ITC Infotech India Limited is seeking a skilled Cyber Security Analyst to join their team in Bengaluru. This role is crucial for maintaining and enhancing the organization's security posture through policy management, compliance, risk assessment, and robust auditing practices.

Key Responsibilities:

• Review, maintain, and update security policies, procedures, and standards/baselines to ensure alignment with best practices and regulatory requirements.
• Support various accreditation programs including ISO27001, ISAE 3402 Type II, SOC2 Type II, and PCI-DSS.
• Collaborate with diverse stakeholders, including external auditors, business leaders, DPO, Legal, HR, and CIO teams, to identify and address critical security requirements.
• Drive continuous security compliance monitoring and reporting.
• Conduct comprehensive risk assessments for information security and cyber risks.
• Facilitate the adoption and implementation of global security frameworks such as NIST Cyber Security and CIS.
• Provide support for the Business Continuity program, encompassing BC Plans and Crisis Management.
• Perform internal security audits and manage certifications like ISO 27001 and SOC.
• Execute in-depth security audits across a wide range of IT infrastructure and applications, including network devices, operating systems (Windows, Linux), databases, access controls, firewalls, IDS/IPS, Web Application Firewalls, proxies, cloud environments (Azure, Amazon), web servers, data centers, email infrastructure, VPNs, routers, backup systems, disaster recovery solutions, and endpoint security.
• Conduct thorough third-party risk assessments.

Minimum Qualifications and Background:

• 3-6 years of relevant experience in cyber security.
• Undergraduate degree with at least one professional certification such as ISO27001 LA, CISA, or CISSP.
• Proven experience in implementing the ISO27001 standard.
• Solid knowledge of ISO27001, ISO27002, ISO27017, ISO27018, PCI DSS, NIST cyber security standards, and CIS benchmarks.
• Experience performing audits of cloud infrastructure is mandatory.
• Proficiency in security-related technologies and cloud security principles.
• Excellent written and verbal communication, documentation, and presentation skills.