Information Security Analyst

WE’RE HIRING: INFORMATION SECURITY ANALYST

Company: Kapstone Technological Services LLP
Location: Navi Mumbai, Maharashtra
Experience: 1–3 Years
Employment Type: Full-Time
Work Location Preference: Candidates based in Navi Mumbai, Mumbai, Thane, or nearby areas are preferred.

About the Role

Kapstone Technological Services LLP is looking for an Information Security Analyst to support information security operations, risk management, compliance activities, and the implementation of security controls. The ideal candidate should have a good understanding of cybersecurity fundamentals, vulnerability management, security monitoring, and ISO 27001 requirements.

Key Responsibilities

• Assist in implementing and maintaining ISO 27001:2022 ISMS and information security policies.
• Support information security risk assessments, gap analysis, and risk treatment activities.
• Maintain risk registers, compliance documentation, audit records, and Statements of Applicability (SoA).
• Assist with internal audits, certification readiness, and corrective action tracking.
• Monitor security alerts, vulnerabilities, endpoint protection, and network security activities.
• Support vulnerability assessments, incident response, investigation, and remediation.
• Review access controls, user permissions, and security configurations.
• Assist in implementing security controls aligned with ISO 27001, NIST CSF, SOC 2, and PCI DSS, where applicable.
• Coordinate with internal teams and clients on security-related requirements.
• Support employee security awareness and compliance training.

Required Qualifications & Skills

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 2-3 years of experience in Information Security, Cybersecurity, GRC, or ISMS.
• Basic understanding of ISO 27001:2022 and information security controls.
• Knowledge of risk assessments, audit documentation, and compliance processes.
• Understanding of vulnerability management, incident response, access control, and network security.
• Familiarity with security monitoring tools, endpoint security, or SIEM platforms is an advantage.
• Good analytical, documentation, communication, and problem-solving skills.

Preferred Certifications

• ISO 27001 Foundation or Lead Auditor
• CompTIA Security+
• Certified Information Systems Security Professional (CISSP), where applicable to experience
• Other relevant cybersecurity or GRC certifications

Pay: ₹30,000.00 - ₹60,000.00 per month

Work Location: In person