Cyber Security & GRC Specialist - Bangalore - GEVT

Cyber Security & GRC Specialist - Bangalore - GEVT

• Build the organization’s GRC framework from ground up.
• Design and implement ISMS aligned with ISO 27001.
• Lead ISO 27001 / SOC 2 readiness and certification process.
• Develop and document security policies, SOPs, and procedures.
• Conduct risk assessments, maintain risk register, and perform gap analysis.
• Drive internal and external audits independently.
• Ensure ongoing compliance monitoring and evidence management.

• Implement and manage AWS security best practices.
• Configure and manage: IAM,KMS,GuardDuty,CloudTrail,WAF (Mandatory)
• Secure VPC configurations and encryption standards.
• Oversee secure architecture review with DevOps teams.

• Conduct / coordinate Vulnerability Assessment & Penetration Testing (VAPT).
• Manage remediation tracking and closure.
• Implement WAF policies and rule tuning.
• Set up basic SOC monitoring processes and incident response workflows.
• Perform root cause analysis for security incidents.

• Implement and manage: SIEM tools,IDS/IPS,Endpoint security solutions
• Develop incident response playbooks.
• Support business continuity and disaster recovery planning.

• 4–5 years in Cyber Security roles.
• Strong hands-on experience in GRC & Compliance implementation
• Strong hands-on experience in  ISO 27001 or SOC 2 frameworks
• Strong hands-on experience in WAF configuration & management
• Strong hands-on experience in  VAPT execution and remediation tracking
• Experience in AWS security controls.
• Good knowledge of network security & firewalls.
• Ability to work independently and build processes from scratch.

• ISO 27001 Lead Implementer / Auditor
• AWS Security Specialty
• CISM / CISSP / CCSP

• Education: Bachelor’s degree in IT, Computer Science, Engineering, or equivalent.

• Notice Period: Immediate to 30 days
• Work From Office – 5 Days (Bangalore)
• Individual Contributor Role (No existing security team)

Experience Level