Security Analyst - Advisory

NopalCyber; Hyderabad; Sur place; INR 1 500 000 - 2 100 000; Plein temps

Résumé du poste

NopalCyber is seeking a high-energy GRC professional to join the CISO’s office and strengthen governance, risk, and compliance across IT and business processes.

You will support internal audits, regulatory alignment, and risk mitigation in a dynamic cybersecurity services environment.

Qualifications

• Bachelor's degree in Engineering or related technology discipline.
• Mandatory Certification: CISA or ISO 27001 Lead Auditor.
• Additional certifications preferred: CISSP, CIPP, CCSK, or CCSP.
• Public Cloud certifications (AWS, Azure, GCP).
• 6 to 10 years total experience with IT and GRC functions.

Responsabilités

• Serve as a subject matter expert on information and cybersecurity governance, risk, and compliance (GRC) services.
• Execute security assessments of on-premise/cloud IT environments aligned with objectives and regulatory requirements.
• Conduct testing and validation of IT security controls, with detailed reports.
• Manage internal audits per CISO's directives and present metrics.
• Apply knowledge of data protection laws (e.g., DPDP Act, 2023).
• Utilize and manage GRC tools and platforms.
• Conduct security control assessments for web/mobile apps and enterprise systems.
• Drive third-party risk management and support client initiatives.
• Deliver complex GRC projects in fast-paced environments.
• Engage in knowledge-sharing to strengthen team capabilities.
• Continuously enhance cybersecurity strategy against evolving threats.

Connaissances

GRC expertise

IT governance

Security risk

Communication

Formation

Bachelor's degree in Engineering or related tech

Outils

Vulnerability scanners

Code review platforms

Description du poste

NopalCyber makes cybersecurity manageable, affordable, reliable, andpowerful for companies that need to be resilient and compliant. Managedextended detection and response (MXDR), attack surface management (ASM), breachand attack simulation (BAS), and advisory services fortify your cybersecurityacross both offense and defense. AI-driven intelligence in our Nopal360°platform, our NopalGo mobile app, and our proprietary Cyber IntelligenceQuotient (CIQ) lets anyone quantify, track, and visualize their cybersecurityposture in real-time. Our service packages are tailored to client needs andbudgets, with external threat analysis provided at no cost—democratizing accessto enterprise-grade cybersecurity for all.

Job Description

Job Statement:

NopalCyber makes cybersecurity manageable, affordable, reliable, andpowerful for companies that need to be resilient and compliant. Managedextended detection and response (MXDR), attack surface management (ASM), breachand attack simulation (BAS), and advisory services fortify your cybersecurityacross both offense and defense. AI-driven intelligence in our Nopal360°platform, our NopalGo mobile app, and our proprietary Cyber IntelligenceQuotient (CIQ) lets anyone quantify, track, and visualize their cybersecurityposture in real-time. Our service packages are tailored to client needs andbudgets, with external threat analysis provided at no cost—democratizing accessto enterprise-grade cybersecurity for all.

We are looking for a high-energy, results-oriented GRC professionalwith 6 to 10 years of experience, combining expertise in IT andGovernance, Risk, and Compliance (GRC). The candidate will report directlyto the CISO’s office and contribute to internal audits andprojects executed under CISO’s instructions.

Key Responsibilities:

• Serve as a subject matter expert oninformation and cybersecurity governance, risk, and compliance (GRC)services and solutions.
  
• Execute security assessments of on-premise/cloudIT environments aligned with business objectives and regulatoryrequirements.
  
• Conduct testing and validation of IT securitycontrols, documenting findings and preparing detailed reports.
  
• Manage and perform internal audits as perthe CISO’s directives, contributing to risk posture improvementsand present the metrics to the CISO on a regular basis.
  
• Apply knowledge of the Digital Personal DataProtection Act, 2023, and other global data protection laws.
  
• Utilize and manage GRC tools and platforms.
  
• Conduct security control assessments forweb/mobile applications and enterprise systems.
  
• Drive third-party risk management and supportclient-facing initiatives.
  
• Deliver complex GRC projects in dynamic,fast-paced environments.
  
• Engage in knowledge-sharing forums to strengthenteam capabilities.
  
• Continuously enhance the cybersecurity strategybased on evolving threats and technologies.
  

Job Requirements:

1. Qualifications:

• Bachelor’s degree in Engineering or a relatedtechnology discipline.
  
• Mandatory Certification :
  
• Must possess CISA or ISO 27001 LeadAuditor certification.
  
• Additional certifications preferred:
  
• CISSP, CIPP, CCSK, or CCSP
  
• Public Cloud certifications (AWS, Azure, GCP)
  

2. Experience:

• 6 to 10 years of totalexperience with proven exposure to both IT and GRC functions.
  
• Experience in internal audits, consulting, andcybersecurity risk advisory.
  

3. Desired Skills:

• Deep understanding of information securityprinciples and compliance frameworks.
  
• Strong understanding of the IT topology andapplication development principles
  
• Hands-on experience with security tools (e.g.,vulnerability scanners, code review platforms).
  
• Strong exposure to IT/cybersecurity standards:ISO 27001/27005, NIST CSF, PCI DSS, SOC 1/2, GDPR, COBIT.
  
• Excellent communication skills, documentationabilities, and stakeholder engagement.
  
• Experience in program and project managementwithin cybersecurity initiatives.
  

4. Personal Attributes:

• Self-starter with strong problem-solving skills.
  
• Highly motivated and able to work with minimalsupervision.
  
• Strong prioritization and multitasking abilitiesunder pressure.