Information Security Analyst (GRC & Vulnerability Management)

About the role

We are seeking an experienced Information Security Analyst to lead governance, risk, and compliance (GRC) activities and manage vulnerability assessments across our infrastructure. The role involves close collaboration with IT, application, and business teams to strengthen our security posture.

Key responsibilities

• Perform infrastructure vulnerability assessments using Nessus and produce detailed reports.
• Work with infrastructure and application teams to track, validate, and remediate identified vulnerabilities.
• Support internal and external security audits by gathering evidence, preparing documentation, and coordinating with stakeholders.
• Conduct risk assessments across business units, maintain risk registers, and recommend mitigation measures.
• Participate in incident response activities, providing risk analysis and supporting remediation.
• Assist in implementing security controls and automation to reduce business risks.
• Perform gap assessments against the RBI Cyber Security Framework and support implementation of required controls.
• Monitor compliance with organizational security policies and regulatory requirements.

Required profile

• 4+ years of experience in information security, GRC, risk management, or vulnerability management.
• Hands‑on experience with Nessus for vulnerability assessment and reporting.
• Strong understanding of security audits, compliance activities, and risk assessment processes.
• Familiarity with the RBI Cyber Security Framework and experience conducting gap assessments.
• Knowledge of security frameworks such as NIST CSF, CIS Controls, ISO 27001, and HIPAA.
• Basic understanding of incident response processes and security best practices.
• Excellent communication and stakeholder‑management abilities.

Required skills

• Nessus
• RBI Cyber Security Framework
• NIST Cybersecurity Framework (CSF)
• CIS Controls
• ISO 27001
• HIPAA