Position : Cyber Security Lead Analyst Risk & Compliance
Experience : 9+ Years
Location : Bangalore
Open Positions : 2
Job Summary :
We are seeking a highly experienced Cyber Security Lead Analyst with 9+ years of hands-on experience in risk management and compliance. The ideal candidate will be responsible for leading cybersecurity risk assessments within our enterprise IT environments, with a specific focus on Digital Workplace Services (DWS), including Azure and O365 platforms. This role requires strong technical expertise to identify vulnerabilities and drive GRC processes, ensuring our operations align with stringent security and regulatory frameworks.
Key Responsibilities :
- Lead cybersecurity risk assessments across enterprise IT environments, with a focus on cloud, O365, and virtualization platforms.
- Conduct in-depth technical risk analysis to identify vulnerabilities and compliance gaps, and recommend effective mitigation strategies.
- Drive Governance, Risk, & Compliance (GRC) processes, ensuring strict adherence to organizational policies and regulatory frameworks.
- Collaborate with business and IT stakeholders to ensure the secure design, implementation, and operation of DWS environments.
- Provide subject matter expertise on Exchange, O365, Azure security, and IronPort email security.
- Support incident response and remediation activities related to risk findings.
- Prepare and present comprehensive risk reports, compliance dashboards, and security recommendations to senior leadership.
- Mentor junior analysts and guide teams in executing compliance assessments and security initiatives.
Required Skills & Qualifications :
A minimum of 9+ years of experience in cybersecurity.Strong expertise in Cyber Security and Risk Management, with a proven track record of hands-on technical risk analysis.Solid experience in Risk Assessment and GRC frameworks.Proficiency in DWS environments, including virtualization, cloud (Azure), and O365 products (Exchange, Teams, OneDrive, SharePoint, etc.).A strong background in Exchange / O365 products with demonstrable exposure to risk assessments.A deep understanding of workstation, server-level security, and endpoint protection.(ref : hirist.tech)