Cyber Security Specialist

Getinz Techno Services; Bengaluru; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

Getinz Techno Services in Bengaluru is seeking a hands-on Cyber Security & GRC Specialist (Individual Contributor) to independently build and manage the organization’s security governance, risk, and compliance framework from scratch.

The role focuses on ISO 27001 and SOC 2 readiness, policy development, and end-to-end security operations, with no existing security team; 5 days on-site in Bangalore.

Qualifications

• 4–5 years in Cyber Security roles.
• Strong hands-on experience in GRC & Compliance implementation.
• Strong hands-on experience in ISO 27001 or SOC 2 frameworks.
• Strong hands-on experience in WAF configuration & management.
• Strong hands-on experience in VAPT execution and remediation tracking.
• Experience in AWS security controls.
• Good knowledge of network security & firewalls.
• Ability to work independently and build processes from scratch.

Responsibilities

• Build and manage the organization’s GRC framework from ground up; design ISMS aligned with ISO 27001 and lead ISO 27001 / SOC 2 readiness and certification.
• Develop and document security policies, SOPs, and procedures; conduct risk assessments and maintain risk register; drive audits.
• Implement and manage AWS security best practices, IAM, KMS, GuardDuty, CloudTrail, and WAF; ensure secure VPC configurations.
• Coordinate Vulnerability Assessments and Penetration Testing (VAPT); manage remediation tracking and incident response workflows.

Skills

GRC & Compliance

ISO27001 / SOC2

AWS security controls

VAPT

Network security

Education

Bachelor’s degree in IT/CS/Engineering

Tools

AWS

WAF

SIEM

IAM/KMS

Job description

Cyber Security & GRC Specialist - Bangalore - GEVT

Job Title: Cyber Security & GRC Specialist (Individual Contributor)

Experience: 4+ Years

Location: Bangalore

About the Company:

Our client is a product-focused organization founded by experienced technocrats with over 14 years of collaboration and a combined industry experience of 100+ years. With strong domain expertise in the Infrastructure & Operations space, it has built a robust presence across India and international markets. The company offers a comprehensive portfolio of integrated IT solutions designed to simplify and automate complex IT environments. Its solutions empower enterprises to improve operational efficiency and deliver superior services to end users.

Role Overview:

We are looking for a hands‑on Cyber Security & GRC Specialist who will independently build and manage the organization’s security governance, risk, and compliance (GRC) framework from scratch.This is a high‑ownership role where the selected candidate will be responsible for establishing security policies, driving compliance initiatives (ISO 27001, SOC 2), implementing technical security controls, and managing end‑to‑end security operations without an existing team.

Key Responsibilities:

• GRC & Compliance (Primary Focus) Build the organization’s GRC framework from ground up. Design and implement ISMS aligned with ISO 27001. Lead ISO 27001 / SOC 2 readiness and certification process. Develop and document security policies, SOPs, and procedures. Conduct risk assessments, maintain risk register, and perform gap analysis. Drive internal and external audits independently. Ensure ongoing compliance monitoring and evidence management.
• Cloud & Network Security Implement and manage AWS security best practices. Configure and manage: IAM,KMS,GuardDuty,CloudTrail,WAF (Mandatory) Secure VPC configurations and encryption standards. Oversee secure architecture review with DevOps teams.
• VAPT & Threat Management (Mandatory) Conduct / coordinate Vulnerability Assessment & Penetration Testing (VAPT). Manage remediation tracking and closure. Implement WAF policies and rule tuning. Set up basic SOC monitoring processes and incident response workflows. Perform root cause analysis for security incidents.
• Security Operations Implement and manage: SIEM tools,IDS/IPS,Endpoint security solutions Develop incident response playbooks. Support business continuity and disaster recovery planning.

Required Skills:

• 4–5 years in Cyber Security roles.
• Strong hands‑on experience in GRC & Compliance implementation.
• Strong hands‑on experience in ISO 27001 or SOC 2 frameworks.
• Strong hands‑on experience in WAF configuration & management.
• Strong hands‑on experience in VAPT execution and remediation tracking.
• Experience in AWS security controls.
• Good knowledge of network security & firewalls.
• Ability to work independently and build processes from scratch.

Preferred Certifications (Good to Have):

• ISO 27001 Lead Implementer / Auditor
• AWS Security Specialty
• CISM / CISSP / CCSP

Eligibility / Qualifications:

• Education: Bachelor’s degree in IT, Computer Science, Engineering, or equivalent.

Other Details:

• Notice Period: Immediate to 30 days
• Work From Office – 5 Days (Bangalore)
• Individual Contributor Role (No existing security team)
• Experience Level Senior Level