Information Security Analyst (GRC & Vulnerability Management)

Saarthi; Thiruvananthapuram; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Saarthi in Trivandrum, Kerala, seeks an information security specialist with 2-3 years of experience to perform vulnerability management, assess risks, and support audits. You will coordinate with IT, security, and business units to ensure remediation and strengthen controls.

The role involves Nessus-based assessments, risk reporting, and compliance alignment with RBI CSF and other standards. A hands-on security mindset and strong stakeholder communication are essential.

Qualifications

• 4+ years of information security experience with focus on risk, governance, or vulnerability management.
• Experience with vulnerability assessments and reporting using Nessus.
• Familiarity with audits, regulatory requirements, and compliance activities.
• Knowledge of RBI Cyber Security Framework and gap assessments.

Responsibilities

• Perform infrastructure vulnerability assessments using Nessus and prepare vulnerability reports.
• Work with infrastructure and application teams to track and validate vulnerability remediation.
• Support audits by collecting evidence and coordinating with stakeholders.
• Conduct risk assessments across business units and recommend mitigations.
• Maintain risk registers and track remediation activities.
• Participate in incident response with risk analysis and remediation support.
• Assist in security controls implementation and RBI CSF alignment.
• Monitor compliance with security policies and regulatory requirements; coordinate with teams to improve posture.

Skills

Vulnerability Management

Nessus

Audit & Compliance

Security Frameworks

NIST CSF

ISO 27001

HIPAA

CISA

CISM

CRISC

Incident Response

Stakeholder Management

Banking/FS NBFC experience

Tools

Nessus

Job description

Description

Job Details

• Location: Trivandrum
• Experience: 2 - 3 Years
• Job Type: Full Time
• Openings: 1

Role Description

Key Responsibilities

• Perform infrastructure vulnerability assessments using Nessus and prepare vulnerability reports.
• Work with infrastructure and application teams to track and validate vulnerability remediation.
• Support internal and external security audits by collecting evidence, preparing documentation, and coordinating with stakeholders.
• Conduct risk assessments across business units, identify security risks, and recommend mitigation measures.
• Maintain and update risk registers and track remediation activities.
• Participate in incident response activities by providing risk analysis and supporting remediation efforts.
• Assist in implementing security controls and automation to reduce business risks. Perform gap assessments against the RBI Cyber Security Framework and support implementation of required controls.
• Monitor compliance with organizational security policies and regulatory requirements. Coordinate with business, IT, and security teams to improve the organization's overall security posture.

Required Skills

• 4+ years of relevant experience in Information Security, GRC, Risk Management, or Vulnerability Management.
• Hands‑on experience with Nessus for vulnerability assessment and reporting.
• Good understanding of information security audits and compliance activities.
• Experience conducting risk assessments and managing risk registers.
• Familiarity with the RBI Cyber Security Framework and experience performing compliance or gap assessments.
• Knowledge of security frameworks such as NIST CSF, CIS Controls, ISO 27001, HIPAA, and similar standards.
• Basic understanding of incident response processes and security best practices. Good communication and stakeholder management skills.
• Ability to prepare reports and present findings to technical and business teams.
• Preferred Skills Experience in the Banking, Financial Services, or NBFC sector.
• Exposure to vulnerability remediation tracking and security governance.
• Relevant certifications such as Security+, ISO 27001, CISA, CISM, CRISC, or similar are an added advantage.

Skills

Compliance Management, Security Governance, Audit Support, Vulnerability Management, HIPAA, Nessus, Stakeholder Management