IT Security - Senior Associate

Senior Associate - GRC (Information Security)

Role Summary
We are seeking an experienced Information Security Senior Associate to support Governance, Risk, Compliance (GRC), Privacy, Customer Assurance, and Security Programs. The role involves working closely with business, delivery, product, and IT teams to ensure compliance with security, regulatory, and customer requirements.

Key Responsibilities

• Support ISMS implementation, security governance, policies, and compliance initiatives.
• Conduct security assessments, risk reviews, and maintain risk registers.
• Manage customer security questionnaires, audits, due diligence, and compliance requests.
• Support ISO 27001, GDPR, DPDP, and other regulatory compliance programs.
• Perform third-party/vendor security assessments and track remediation activities.
• Assist with privacy impact assessments, data protection, and data governance initiatives.
• Support security incident management, reporting, and closure activities.
• Prepare security metrics, dashboards, audit reports, and governance updates.
• Drive security awareness and continuous improvement programs.

Experience & Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
• 5 to 8 years of experience in Information Security, GRC, Risk, Compliance, Audit, or Cybersecurity.
• Experience handling customer security assessments, audits, and compliance activities.
• Exposure to technology services, consulting, SaaS, or product-based organizations preferred.

Desired Skills

• Information Security Governance & ISMS
• Risk Management & Compliance
• Privacy & Data Protection (GDPR, DPDP)
• Third-Party Risk Management
• Customer Assurance & Security Audits
• IAM, Vulnerability Management, Security Awareness

Certifications (Preferred)

• ISO 27001 Lead Auditor / Internal Auditor
• ISO 27001 Lead Implementer
• NIST Cybersecurity Framework Certifications
• Privacy Certifications (CDPSE, DCPP, etc.)