Analyst - Information Security (Security, VM & GRC)

Gravitas Technology; Mumbai; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Gravitas Technology is seeking an experienced Information Security Engineer with 4-8 years of hands-on expertise to fortify IAM, vulnerability management, application security, incident handling, and GRC across our enterprise environments.

You will collaborate with global teams to implement security controls, perform risk assessments, and contribute to audits and compliance efforts. Strong communication and ownership mindset are essential.

Qualifications

• 4-8 years of experience in Information Security / Cybersecurity.
• Strong hands-on experience in IAM, Vulnerability Management, Application Security, Security Incident Management, and GRC.

Responsibilities

• Manage IAM processes including user provisioning, access reviews, and privilege management.
• Perform vulnerability assessments, coordinate remediation, and track closure of identified security issues.
• Support application security activities, including security assessments, secure development practices, and remediation coordination.
• Participate in security incident detection, investigation, response, and post-incident analysis.
• Contribute to GRC initiatives, including risk assessments, policy management, and compliance monitoring.
• Work with cross-functional teams to implement and maintain security controls across infrastructure and applications.
• Assist in security audits, documentation, and compliance evidence collection.
• Collaborate with stakeholders to improve Gravitas Technology's overall security posture.

Skills

IAM

Vulnerability Mgmt

App Security

Incident Mgmt

GRC

Security Frameworks

Communication

Education

Bachelor's in CS/IS

Job description

Shift: 1:00 PM 10:00 PM (IST) Experience: 4-8 years

Role overview

We are seeking an experienced Information Security Engineer with 4-8years of hands-on experience across multiple cybersecurity domains. The ideal candidate will have a strong foundation in Identity and Access Management (IAM), vulnerability management, application security, incident management, and governance, risk, and compliance (GRC). This role requires a proactive security professional who can collaborate with internal teams and support enterprise security initiatives in a fast-paced environment.

Key responsibilities

• Manage and support Identity and Access Management (IAM) processes, including user provisioning, access reviews, and privilege management.
• Perform vulnerability assessments, coordinate remediation efforts, and track closure of identified security issues.
• Support application security activities, including security assessments, secure development practices, and remediation coordination.
• Participate in security incident detection, investigation, response, and post-incident analysis.
• Contribute to governance, risk, and compliance (GRC) initiatives, including risk assessments, policy management, and compliance monitoring.
• Work with cross-functional teams to implement and maintain security controls across infrastructure and applications.
• Assist in security audits, documentation, and compliance evidence collection.
• Collaborate with stakeholders to improve the organizations overall security posture.

Required qualifications

• 4-8 years of experience in Information Security / Cybersecurity.
• Strong hands-on experience in:
• Identity and Access Management (IAM)
• Vulnerability Management
• Application Security
• Security Incident Management
• Governance, Risk, and Compliance (GRC)
• Good understanding of enterprise security frameworks, security controls, and risk management practices.
• Strong analytical, problem-solving, and communication skills.

Preferred qualifications:

• Experience supporting SOC 2 readiness and/or ISO 27001 certification initiatives.
• Knowledge of AWS Cloud Security, including cloud security best practices and security controls.
• Experience interacting with clients, auditors, or external stakeholders.
• Industry certifications such as CompTIA Security+, CISSP, or equivalent.

What were looking for

• A well-rounded security professional with exposure across multiple security functions.
• Ability to work independently while collaborating effectively with global and cross-functional teams.
• Strong ownership mindset and attention to detail.
• Excellent communication and stakeholder management skills.