Information Security Analyst (GRC)

About the role

Vistance Networks is recruiting an Information Security (GRC) Analyst in Hyderabad, India, to help develop and maintain its security GRC function. The role works with an international team of GRC professionals across the US and India offices and collaborates with business units, Technology and Security teams to identify, catalogue and resolve security risks.

Key responsibilities

• Identify, analyze, evaluate and document information security risks and controls, and recommend controls to mitigate them
• Manage the exception review and approval process and ensure exceptions are documented and reviewed periodically
• Develop, monitor and analyze security and compliance metrics to evaluate the effectiveness of the information security program
• Perform third-party supplier risk assessments and review security and data privacy clauses in supplier and customer contracts
• Apply AI governance principles, including the NIST AI Risk Management Framework, to assess and mitigate AI-related risks
• Support security and compliance frameworks such as SOC 2 and ISO standards (e.g., ISO/IEC 27001)
• Deliver security awareness sessions, run phishing simulations and coordinate follow-up training
• Communicate threat insights, metrics and recommendations to senior leadership and take part in the vulnerability remediation program

Required profile

• Minimum of 6 years of professional experience in information security, with hands-on GRC experience
• Bachelor's degree or equivalent professional experience
• Previous experience communicating with non-technical audiences and working with business, vendor and customer stakeholders
• Preferred: experience with SOC 2 and ISO/IEC 27001, and with AI risk frameworks

Required skills

• Working knowledge of AI governance and risk management frameworks, including the NIST AI Risk Management Framework
• Expected: experience supporting, implementing or assessing security and compliance programs aligned with SOC 2 and ISO standards
• Strong communication, analytical and critical-thinking skills

Preferred certifications include ISO/IEC 27001 Lead Implementer or Lead Auditor, AICPA SOC for Service Organizations, ISACA AI Fundamentals or CETS, and CISA, CRISC, CISM or CISSP.