Information Security Analyst

True Tech Professionals; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

True Tech Professionals is seeking a skilled Business Security Officer to strengthen our information security governance, risk and compliance (GRC) framework in Mumbai. The role requires translating cybersecurity risks into actionable business decisions while ensuring regulatory compliance and audit readiness.

You will develop and maintain information security policies, manage ISO 27001 implementation and risk assessments, coordinate audits, and support regulatory requirements including RBI,

Qualifications

• 5-7 years of experience in Information Security, GRC or related roles.
• Practical expertise in ISO 27001, security audits, risk assessments and policy management.
• Understanding of financial-sector regulatory requirements and compliance documentation.
• Knowledge of vendor risk management, business continuity and security controls.
• Strong analytical, documentation and stakeholder management skills.

Responsibilities

• Develop and maintain information security policies, standards, procedures and SOPs.
• Manage ISO 27001 implementation, ISMS documentation and risk assessments.
• Coordinate internal and external security audits and ensure timely closure of findings.
• Support compliance with applicable RBI, SEBI and other financial-sector regulations.
• Drive implementation of Digital Personal Data Protection (DPDP) Act requirements.
• Maintain risk registers and prepare management-level risk and compliance reports.
• Conduct vendor security risk assessments and support business continuity and disaster recovery planning.
• Drive employee security awareness and coordinate with IT, Legal, Compliance and business teams.
• Support security incident management, regulatory disclosures and stakeholder communication.

Job description

WE'RE HIRING | Business Security Officer | Goregaon, Mumbai

Build something new with a world-class team!

We are looking for a skilled Business Security Officer to strengthen our Information Security Governance, Risk & Compliance (GRC) framework. This role is ideal for professionals who can translate cybersecurity risks into actionable business decisions while ensuring regulatory compliance and audit readiness.

• Develop and maintain information security policies, standards, procedures and SOPs.
• Manage ISO 27001 implementation, ISMS documentation and risk assessments.
• Coordinate internal and external security audits and ensure timely closure of findings.
• Support compliance with applicable RBI, SEBI and other financial-sector regulations.
• Drive implementation of Digital Personal Data Protection (DPDP) Act requirements.
• Maintain risk registers and prepare management-level risk and compliance reports.
• Conduct vendor security risk assessments and support business continuity and disaster recovery planning.
• Drive employee security awareness and coordinate with IT, Legal, Compliance and business teams.
• Support security incident management, regulatory disclosures and stakeholder communication.

What We'Re Looking For

• 5-7 years of experience in Information Security, GRC or related roles.
• Practical expertise in ISO 27001, security audits, risk assessments and policy management.
• Understanding of financial-sector regulatory requirements and compliance documentation.
• Knowledge of vendor risk management, business continuity and security controls.
• Strong analytical, documentation and stakeholder management skills.

Preferred Certifications:

ISO 27001 Lead Auditor/Lead Implementer, CISA, CISM or CRISC. Exposure to DPDP, PCI DSS or SOC 2 is an advantage.