Cyber Security Analyst

About the role

Skybound Wealth Management is seeking a technically capable Cybersecurity Analyst to join its Mumbai team. The role will focus on securing the company’s Microsoft 365 and Azure environments, investigating incidents and supporting compliance initiatives across its global operations.

Key responsibilities

• Maintain and improve the security posture of Microsoft 365 and Azure, including Azure‑hosted business applications.
• Configure and maintain security controls across Entra ID, Exchange Online and Microsoft 365.
• Review user permissions, privileged access and authentication controls.
• Manage and improve email security, including spam filtering, phishing protection and SPF, DKIM and DMARC.
• Investigate suspicious emails, phishing attempts, account compromises and other security incidents.
• Monitor security alerts, coordinate remediation and work with internal teams and third‑party providers.
• Perform vulnerability assessments and track remediation activities.
• Identify security risks and recommend improvements to strengthen the Group’s cybersecurity posture.
• Support regulatory and compliance initiatives, including DORA, Reg‑S and other applicable frameworks.
• Assist with security policies, risk assessments, audits and third‑party security reviews.
• Support implementation of security standards and best practices.
• Support phishing simulations and cybersecurity awareness initiatives across the organisation.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT, Computer Engineering or a related discipline.
• 4+ years of experience in Cybersecurity or Information Security.
• Strong understanding of Microsoft 365 and Azure security.
• Hands‑on experience with Entra ID, Microsoft Defender, Conditional Access and Identity and Access Management (IAM).
• Experience securing Microsoft cloud environments and investigating cybersecurity incidents.
• Strong knowledge of email security, phishing protection and Microsoft 365 security best practices.
• Knowledge of cybersecurity governance, risk management and regulatory compliance.
• Strong analytical, problem‑solving and communication skills.

Required skills

• Microsoft 365
• Azure
• Entra ID
• Microsoft Defender
• Conditional Access
• Identity and Access Management (IAM)
• Microsoft Purview
• Microsoft Sentinel
• Mimecast
• SPF, DKIM, DMARC
• ISO 27001
• NIST
• CIS Controls