IT security Analyst

Sayyam Investments Pvt. Ltd.; Bengaluru; On-site; INR 700,000 - 1,000,000; Full time

Job summary

Sayyam Investments Pvt. Ltd. seeks an IT Security Analyst to protect systems, data, and customers from cyber threats in Bengaluru. You will monitor security events, manage vulnerabilities, respond to incidents, and support RBI cyber security requirements for NBFCs.

You will collaborate with IT, PMO, GRC, and business teams to implement security controls, review access, and drive continuous improvement across endpoint, network, and cloud security.

Responsibilities

• Monitor security alerts and logs from SIEM, firewalls, endpoint security, email security, and other tools, and investigate suspicious activity.
• Analyse and triage alerts to separate genuine threats from false positives, and elevate as needed.
• Coordinate with the SOC and follow up on reported incidents and alerts.
• Tune monitoring rules and use cases to improve detection and reduce noise.
• Respond to security incidents such as phishing, malware, unauthorised access, and data leakage, following the incident response plan.
• Contain, investigate, and document incidents, including root cause analysis and corrective actions.
• Support timely reporting of cyber incidents to RBI and CERT-In as per regulatory timelines, in coordination with the CISO.
• Maintain an incident register and share lessons learned to prevent recurrence.

Job description

Role & responsibilities

We are looking for an IT Security Analyst to help protect the organisation's systems, data, and customers from cyber threats. The role involves security monitoring, vulnerability management, incident response, access control reviews, and supporting compliance with RBI cyber security requirements applicable to NBFCs. The person will work closely with the IT, PMO, GRC, and business teams.

Key Responsibilities

1. Security Monitoring

• Monitor security alerts and logs from SIEM, firewalls, endpoint security, email security, and other tools, and investigate suspicious activity.
• Analyse and triage alerts to separate genuine threats from false positives, and elevate as needed.
• Coordinate with the SOC (in-house or outsourced) and follow up on reported incidents and alerts.
• Tune monitoring rules and use cases to improve detection and reduce noise.

2. Incident Response

• Respond to security incidents such as phishing, malware, unauthorised access, and data leakage, following the incident response plan.
• Contain, investigate, and document incidents, including root cause analysis and corrective actions.
• Support timely reporting of cyber incidents to RBI and CERT-In as per regulatory timelines, in coordination with the CISO.
• Maintain an incident register and share lessons learned to prevent recurrence.

3. Vulnerability Management

• Conduct or coordinate periodic vulnerability assessments and penetration testing (VAPT) for applications, servers, network devices, and cloud environments.
• Review VAPT reports, prioritise findings by risk, and track remediation with application owners and vendors.
• Verify closure of vulnerabilities through re-testing before marking them closed.
• Monitor security advisories and threat intelligence for vulnerabilities affecting the organisation's systems, and drive timely patching.

4. Access and Identity Security

• Conduct periodic user access reviews for critical applications, servers, and databases.
• Monitor privileged and admin accounts and ensure privileged access is controlled and logged.
• Ensure onboarding, role change, and offboarding access requests follow the approved process.
• Review MFA coverage and enforce strong authentication for critical systems.

5. Endpoint, Network, and Cloud Security

• Manage and review configurations of security tools such as endpoint protection (EDR/antivirus), DLP, firewalls, email security, and web filtering.
• Review firewall rules periodically and remove unused or overly permissive rules.
• Support secure configuration (hardening) of servers, endpoints, and cloud resources as per security baselines.
• Review security of cloud environments for misconfigurations and excessive permissions.

6. Application and Vendor Security

• Participate in security reviews of new applications, system changes, and projects before go-live.
• Conduct security risk assessments of third-party vendors and service providers during onboarding and periodically after.
• Review security clauses in vendor contracts and outsourcing arrangements in coordination with GRC and Legal.

7. Compliance and Audit Support

• Support compliance with RBI requirements on IT governance, cyber security, and IT outsourcing, as well as the DPDP Act, 2023.
• Provide evidence and responses for IS audits, RBI inspections, internal audits, and ISO 27001 audits (if applicable).
• Track closure of security-related audit observations.
• Help draft and update information security policies, standards, and SOPs.

8. Business Continuity and Security Awareness

• Support BCP and DR drills from a security perspective and document outcomes.
• Run security awareness programmes, phishing simulations, and training sessions for employees.
• Prepare regular reports for the CISO on alerts, incidents, vulnerabilities, access reviews, and remediation status.