Lead Security Analyst

Governance & Policy Management 

• Support the lifecycle management of information security, privacy, and risk management policies (drafting, review, approvals, communication, and periodic refresh). 
  

• Maintain policy repositories and ensure alignment with applicable frameworks and regulatory requirements. 
  

• Assist with governance reporting, metrics, and committee materials. 
  

Risk Management 

• Participate in enterprise and IT risk assessments, including risk identification, scoring, documentation, and tracking of mitigation plans. 
  

• Support risk workshops and coordination with business and technology teams. 
  

• Maintain risk registers and follow up on remediation activities. 
  

Compliance & Assurance 

• Support compliance programs aligned to frameworks such as:  
  

• SOC 1 / SOC 2 
  

• ISO/IEC 27001 
  

• PCI DSS 
  

• NIST CSF / NIST 80053 (as applicable) 
  

• Assist with internal and external audits, including evidence collection, walkthroughs, control testing, and issue tracking. 
  

• Support customer, vendor, and regulatory inquiries related to security and compliance. 
  

Regulatory & Privacy Support 

• Assist with compliance activities related to applicable laws and regulations (e.g., India Digital Personal Data Protection Act (DPDP), GDPR, or other regional privacy requirements as applicable). 
  

• Support privacy risk assessments, data inventories, and control documentation. 
  

ThirdParty Risk Management 

• Support third party/vendor risk assessments, including questionnaire review, evidence validation, and risk issue tracking. 
  

• Coordinate with procurement, legal, and security teams on vendor compliance matters. 
  

Reporting & Continuous Improvement 

• Prepare dashboards, metrics, and reports for management and audit committees. 
  

• Identify opportunities to improve GRC processes, tooling, and documentation. 
  

• Support implementation and maintenance of GRC tools (e.g., Archer, ServiceNow GRC, MetricStream, or similar).