Conduct cybersecurity risk assessments across on-premise and cloud environments, manage third-party security evaluations, map controls to ISO, SOC 2, NIST, and GDPR, support audits, assess cloud security, coordinate vulnerability remediation, develop policies, and test business continuity and disaster recovery plans. Translate technical risks into actionable reports for technical and executive stakeholders.
Role Overview:
Techdefence Labs is looking a proactive Sr. GRC Analyst who will assess and mitigate risks across on-premise and cloud environments, lead third-party/vendor security evaluations, and ensure compliance with frameworks like ISO 27001, SOC 2, NIST, and GDPR. The role includes managing vulnerability assessments, supporting audits, enhancing security architecture, and driving business continuity, while translating technical risks into clear, actionable recommendations.
Required Qualifications:
- This individual’s primary day to day responsibilities is mentioned below (but are not limited to these):
- Plan and conduct end-to-end cybersecurity risk assessments for ICT assets (networks, servers, applications, endpoints, cloud), including threat/vulnerability identification, likelihood/impact analysis, risk scoring, and treatment plans.
- Lead third-party/vendor risk assessments: due diligence, security questionnaires, evidence reviews, control gap analysis, and ongoing monitoring aligned to ISO 27001 Annex A, SOC 2 trust services criteria, NIST controls, and GDPR requirements.
- Map assessment findings to GRC frameworks and regulatory requirements; produce compliance-ready reports, risk registers, and executive summaries.
- Collaborate with IT and engineering on security architecture reviews for networks, servers, and cloud; recommend hardening, segmentation, and secure configuration baselines.
- Support policy, standard, and procedure development for risk management, vulnerability management, incident response, access control, and asset management.
- Prepare materials for internal/external audits (ISO 27001, SOC 2) and respond to client security assessments and RFPs.
- Evaluate and secure cloud environments (AWS, Azure, GCP) by conducting cloud-specific risk assessments, reviewing identity and access management, ensuring workload segmentation, and checking adherence to cloud security posture management best practices.
- Assess compliance of cloud service providers with frameworks such as ISO 27017/27018, CIS Cloud Benchmarks, and guide the deployment of secure and resilient cloud architectures.
- Formulation and testing of Business Continuity and Disaster Recovery Plans; identify ICT risks impacting availability and participate in tabletop and failover exercises to ensure preparedness.
- Evaluate the use of cryptographic protocols and encryption solutions for data at rest, in transit, and in use across enterprise systems and cloud assets.
- Knowledge of security controls like Authentication, Authorization, Data Security, IAM
Required Qualifications:
- Demonstrated experience implementing or assessing against GRC frameworks: ISO/IEC 27001/27002, SOC 2, NIST CSF/800-53/800-171, and GDPR security/privacy controls.
- Experience with third-party risk management: security questionnaires, SIG/CAIQ or equivalent, due diligence evidence review, and continuous monitoring.
- Proficiency with vulnerability management tools and VAPT methodologies; ability to interpret CVEs/CVSS and prioritize remediation.
- Strong documentation and reporting skills with the ability to communicate technical risks to non-technical stakeholders.
- Understanding of secure configuration benchmarks (e.g., CIS), patching cycles, logging/monitoring fundamentals, and incident response coordination.
- Mandatory certifications CEH/Security +
Preferred Qualifications:
- Certifications: CISM, CISA, ISO 27001 Lead Auditor/Lead Implementer.
- Hands-on exposure to SIEM, EDR, SAST/DAST, cloud security posture management, and container security basics.
- Tools and Technologies:
- Vulnerability/VAPT: Nessus, Qualys, OpenVAS, Burp Suite, Nmap, Metasploit.
- Governance/Risk/Compliance: risk registers, control libraries, SIG/CAIQ, ISO 27001 documentation suites; ticketing for remediation tracking.
- Infrastructure: Windows/Linux server administration fundamentals, network device configuration review, cloud (AWS/Azure/GCP) security baselines.
- Monitoring: SIEM/EDR exposure for context during risk assessments and validation of remediation.
TechDefence Labs (TechD Cybersecurity Limited) Pune, Mahārāshtra, IND Office
303, 3rd floor, Metropolis, Balewadi Highstreet, Balewadi,, Pune, India, 411405
Similar Jobs
Aerospace • Artificial Intelligence • Cloud • Machine Learning • Software • Cybersecurity • Defense
Develops and analyzes mechanical and thermal systems through dynamic and steady-state simulation. Writes system and simulation requirements, contributes to architecture, integration, controller design, and real-time measurement and control. Uses MATLAB, Simulink, and Simscape to model aerospace products, including valves, heat exchangers, air conditioning, and refrigeration systems. Collaborates globally, supports R&D and new product development, and applies analytical problem-solving to conceptualize and validate simulation models.
Top Skills:
Aerospace SystemsAIMachine LearningMatlabMechanical SystemsReal-Time Control SystemsSimscapeSimulinkThermal Systems
Fintech • Legal Tech • Software • Financial Services • Cybersecurity • Data Privacy
Manage end-to-end fund accounting for Luxembourg real estate fund structures, including NAV calculations, capital accounts, management fees, and real estate transaction recording. Support month/quarter/year-end closes, investor reporting, capital calls, distributions, audits, and regulatory reporting (AIFMD/CSSF). Coordinate with AML/KYC, transfer agency, legal, administrators, auditors, and valuers. Drive process improvements and support system automation.
Top Skills:
Accounting SystemsExcel
Aerospace • Artificial Intelligence • Cloud • Machine Learning • Software • Cybersecurity • Defense
Manage export compliance operations, including transaction screening, audits, risk assessments, export license and authorization management, metrics, regulatory procedures, training, and policy development. Ensure compliance with EAR, ITAR, OFAC, BIS, SCOMET, Military End User regulations, and applicable local export controls. Support global access controls, license renewals, internal audits, and continuous improvement of export compliance processes.
Top Skills:
Ocr EaseSap Gts
What you need to know about the Pune Tech Scene
Once a far-out concept, AI is now a tangible force reshaping industries and economies worldwide. While its adoption will automate some roles, AI has created more jobs than it has displaced, with an expected 97 million new roles to be created in the coming years. This is especially true in cities like Pune, which is emerging as a hub for companies eager to leverage this technology to develop solutions that simplify and improve lives in sectors such as education, healthcare, finance, e-commerce and more.
