Security Analyst/Cyber Security

Security Analyst IT & OT Cyber Security

Level – Assistant/Deputy Manager

Budget – 15 LPA (Max 30% Hike on current ctc)

Location – Gurgaon, Sec-35

5 Days working , 17 Saturday working in a year

Job Summary:

The Security Analyst is responsible for ensuring the security and compliance of IT and OT environments. This includes managing cyber security operations, conducting audits, onboarding OT applications, enforcing security baselines, and driving awareness programs. The role also involves coordinating security assessments, addressing vulnerabilities, and ensuring adherence to regulatory and organizational standards.

Key Responsibilities:1. IT & OT Cyber Security Management

• Monitor and enhance security controls for IT and OT environments.
• Implement security policies, procedures, and baseline configurations.
• Support incident response and remediation activities for IT and OT systems.
• Work closely with IT and OT teams to integrate security best practices.

2. Audits & Compliance

• Conduct and support

  ISO Surveillance Audits

   and internal security audits.
• Ensure compliance with

  ISO 27001, NIST, IEC 62443

  , and other relevant standards.
• Address and close findings from internal and external audits.
• Maintain audit logs, reports, and compliance documentation.

3. OT/Application Onboarding & Baseline Compliance

• Assist in

  onboarding OT and business applications

   with security controls.
• Define and enforce

  security baselines

   for applications and systems.
• Work with teams to ensure security requirements are met before deployment.

4. Data Protection & Awareness Programs

• Organize

  Data Protection Workshops

   to educate employees on data security.
• Conduct

  Security Awareness Training

   for end users and key stakeholders.
• Develop training materials and campaigns to improve cybersecurity culture.

5. Vulnerability & Risk Management

• Follow up on

  Vulnerability Assessment & Penetration Testing (VAPT)

   reports.
• Track remediation efforts and ensure timely closure of security gaps.
• Work with teams to mitigate risks and enforce cybersecurity measures.

6. Routine Reviews & Report Preparation

• Coordinate

  security reviews, risk assessments, and compliance checks

  .
• Prepare detailed reports as per audit requirements.
• Present findings and recommendations to management.

7. SOC Incident Monitoring & Timely Closure

• Monitor and track SOC incidents, ensuring effective resolution in a timely manner.
• Provide accurate and up-to-date incident reports, ensuring continuous improvement in incident management processes.
• Manage

  device onboarding

   to ensure all devices are properly integrated into the SOC.

Required Skills & Qualifications:

• Education:

   Bachelors degree in Information Security, Computer Science, or related field.

• Certifications (Preferred):

   CEH, CISSP, CISA, ISO 27001 Lead Auditor, IEC 62443.

• Experience:

   Min 5-8 years in IT & OT security, audit management, and risk assessment.

• Technical Skills:

• Understanding of

  OT/SCADA security, industrial control systems (ICS)

  .
• Hands-on experience with

  SIEM, EDR, firewalls, PAM, and DLP solutions

  .
• Knowledge of

  ISO 27001, IEC 62443, NIST CSF, GDPR

  .
• Experience in vulnerability management, audits, and compliance.

• Soft Skills:

• Strong analytical and problem-solving skills.
• Excellent communication and stakeholder management.
• Ability to work harmoniously with various departments and ensure seamless integration.