Cybersecurity - Risk & Compliance Analyst

Scybers; Chennai District; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Scybers is seeking a Cybersecurity - Risk & Compliance Analyst (GRC) to guide clients on risk management and compliance across business domains. You will assess information security controls and report findings to strengthen security posture.

You will engage multiple stakeholders, perform third-party due diligence, and support leadership with cost-benefit analyses of proposed security enhancements. 2+ years of governance experience is preferred.

Qualifications

• 2 years of experience in information security governance including quantified risk assessments, third-party risk assessments, and information security audits.
• Bachelor/Master's Degree in Cybersecurity.
• Certifications such as ISO27001 Lead Auditor/Lead Implementer, ISO22301 Lead Auditor/Lead Implementer.
• Cloud platform familiarity with ability to audit environments and suggest best practices.
• Knowledge of security frameworks: ISO27001, PCI, HIPAA, SOC 1/2, NIST CSF, Cloud Compliance Framework.
• Excellent problem solving, interpersonal, and communication skills.
• Team player and go-getter who thrives for success.

Responsibilities

• Advise clients on cyber risks applicable to their business domains and ensure quality delivery of services.
• Engage with multiple stakeholders across domains to drive risk & compliance initiatives.
• Identify areas of improvement to processes and systems and report on adherence to security controls.
• Carry out third party security due diligence and information security awareness programs.
• Provide cost-benefit analyses of proposed security enhancements to leadership.

Skills

Governance

Risk assessment

Third-party risk

Information security

Auditing

Communication

Education

Bachelor's/Master's in Cybersecurity

Tools

ISO 27001

SOC 1/2

NIST CSF

Job description

Cybersecurity - Risk & Compliance Analyst

We help progressive enterprises navigate the new reality of digital risks with proactive and intelligent cybersecurity.

Job Description

As a GRC Analyst, you will leverage yourexperience and knowledge of business & industry security issues / trendsand will advise our clients on the cyber risks applicable to their businessdomains. You will be accountable for ensuring a quality delivery of service asper the terms mentioned in the engagement letter.

Your role would require you to engage withmultiple stakeholders across different domains to drive the risk &compliance initiatives. You will add value to our clients security posture byidentifying areas of improvement to both processes and systems, reviewing andreporting on the adherence to security controls and by advising our clients onhow they can further strengthen their security controls.

You will partner with our clients bycarrying out third party security due diligence, information security awarenessprograms and supporting the leadership in taking educated decisions byproviding clear cost benefit analysis of proposed security enhancements.

2 years years of experience in informationsecurity governance including experience in carrying out quantified riskassessments, third-party risk assessments, defining and managing informationsecurity processes, performing information security audits, and allied areas.

Bachelors / Masters Degree inCybersecurity

• Certifications such as ISO27001 LeadAuditor/ Lead Implementer, ISO22301 Lead Auditor/ Lead Implementer
• Work experience or conceptualunderstanding of cloud platform with the ability to suggest best practices orcarry out audits on the environment.
• Sound knowledge of security controlframeworks such as ISO27001, PCI, HIPAA, SOC 1/2, NIST Cyber SecurityFramework, Cloud Compliance Framework.
• Excellent problem solving, interpersonal,and communication skills
• A team player and a go-getter who thrivesfor success