Assistant Manager

Position: Governance Support

Location: Thane, Mumbai

Interview: 1st round Virtual then Face to Face ( in Thane only)

Experience: 4-6 Years

Working Hours: 9:30 to 6:30 PM

PURPOSE OF JOB

We are looking for an experienced Cybersecurity Analyst to lead our information security and compliance efforts. This role

involves providing strategic advisory services to ensure compliance with key regulatory frameworks such as PCI-DSS, ISO

27001, RBI, and J/SOX. The ideal candidate will be responsible for developing and maintaining a robust IT security program,

conducting audits, managing risks, and enhancing overall cybersecurity posture through awareness, monitoring, and

continuous improvement initiatives.

KEY RESPONSIBILITIES

• Provide expert consulting and advisory support to ensure compliance with regulatory and industry standards,

including PCI-DSS, ISO 27001, RBI guidelines, and J/SOX.

• Develop, implement, and manage a comprehensive Information Security Program encompassing policies,

procedures, security controls, awareness, and monitoring.

• Conduct internal audits across departments, suppliers, and vendors to assess security compliance and identify gaps.

• Design and deliver Information Security Awareness training to strengthen organizational cybersecurity culture.

• Draft, maintain, and periodically review security policies, procedures, and guidelines to align with evolving threats

and compliance requirements.

• Analyze SOC (Security Operations Center) and VAPT (Vulnerability Assessment and Penetration Testing) reports to

identify non-compliance issues and recommend remediation actions.

• Support internal, external, and third-party audits, including preparation of evidence, documentation, and

remediation tracking.

• Assess and manage cybersecurity risks, vulnerabilities, and threats to protect critical information assets.

• Collaborate with cross-functional teams to integrate security best practices into business processes and technology

implementations.

QUALIFICATION/KNOWLEDGE/SKILLS/EXPERIENCE

• 4-5 year of relevant experience

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

• Professional certifications such as CISSP, CISA, CISM, ISO 27001 LA/LI, or equivalent.

• Proven experience in cybersecurity compliance and risk management.

• Strong knowledge of regulatory frameworks and standards (e.g., PCI-DSS, ISO 27001, RBI guidelines, J/SOX).

• Experience with SOC monitoring, VAPT report analysis, and risk assessment methodologies.

• Excellent communication, presentation, and interpersonal skills.

• Ability to work independently and collaboratively in a cross-functional team environment.

Preferred Qualifications:

• Experience working in a regulated industry such as BFSI, healthcare, or IT services.

• • Hands-on experience with GRC tools and audit management platforms.