Assistant Manager

Position: Governance Support

Location: Thane, Mumbai

Interview: 1st round Virtual then Face to Face ( in Thane only)

Experience: 4-6 Years

Working Hours: 9:30 to 6:30 PM

*PURPOSE OF JOB*

• We are looking for an experienced Cybersecurity Analyst to lead our information security and compliance efforts. This role
• involves providing strategic advisory services to ensure compliance with key regulatory frameworks such as PCI-DSS, ISO
• 27001, RBI, and J/SOX. The ideal candidate will be responsible for developing and maintaining a robust IT security program,
• conducting audits, managing risks, and enhancing overall cybersecurity posture through awareness, monitoring, and
• continuous improvement initiatives.

*KEY RESPONSIBILITIES*

• • Provide expert consulting and advisory support to ensure compliance with regulatory and industry standards,
• including PCI-DSS, ISO 27001, RBI guidelines, and J/SOX.
• • Develop, implement, and manage a comprehensive Information Security Program encompassing policies,
• procedures, security controls, awareness, and monitoring.

• Conduct internal audits across departments, suppliers, and vendors to assess security compliance and identify gaps.
• Design and deliver Information Security Awareness training to strengthen organizational cybersecurity culture.
• Draft, maintain, and periodically review security policies, procedures, and guidelines to align with evolving threats

• and compliance requirements.
• • Analyze SOC (Security Operations Center) and VAPT (Vulnerability Assessment and Penetration Testing) reports to
• identify non-compliance issues and recommend remediation actions.
• • Support internal, external, and third-party audits, including preparation of evidence, documentation, and
• remediation tracking.

• Assess and manage cybersecurity risks, vulnerabilities, and threats to protect critical information assets.
• Collaborate with cross-functional teams to integrate security best practices into business processes and technology

implementations.

*QUALIFICATION/KNOWLEDGE/SKILLS/EXPERIENCE*

• 4-5 year of relevant experience
• Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Professional certifications such as CISSP, CISA, CISM, ISO 27001 LA/LI, or equivalent.
• Proven experience in cybersecurity compliance and risk management.
• Strong knowledge of regulatory frameworks and standards (e.g., PCI-DSS, ISO 27001, RBI guidelines, J/SOX).
• Experience with SOC monitoring, VAPT report analysis, and risk assessment methodologies.
• Excellent communication, presentation, and interpersonal skills.
• Ability to work independently and collaboratively in a cross-functional team environment.

*Preferred Qualifications:*

• Experience working in a regulated industry such as BFSI, healthcare, or IT services.

• • Hands-on experience with GRC tools and audit management platforms.