{"id":2802472,"url":"https://alion.io/job/dark-horse-consulting-vulnerability-management-grc-analyst-information-security","title":"Vulnerability Management & GRC Analyst - Information Security","company":{"id":3809819,"name":"Dark Horse Consulting","domain":"darkhorseconsulting.co.in","url":"https://alion.io/company/dark-horse-consulting","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mumbai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":13000,"max_usd":32000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-08-12T12:06:34Z","employer_posted_date":null,"last_verified_at":"2026-08-12T12:06:34Z","board_verified":false,"closed_at":null,"days_open":83,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":83},"description":"Skills required : \n\n- Candidate with strong work experience covering IAM, vulnerability management, Application Security, incident management handling, governance, and risk and compliance.\n\n- Prior experience supporting SOC2 readiness or ISO certifications - preferred.\n\n- AWS Cloud Security knowledge - preferred.\n\n- Client interaction skills - preferred.\n\n- Security+ or CISSP certifications - preferred.\n\n- 4-7 yrs Information Security experience.\n\n- Please do not apply if you are not from Mumbai.\n\nKey Responsibilities : \n\n- Execute comprehensive vulnerability management programs, including scanning, prioritization, and remediation tracking, to minimize the attack surface of our critical financial applications.\n\n- Lead IS GRC initiatives by conducting internal audits and mapping security controls to ISO27001 standards to maintain regulatory compliance and operational excellence.\n\n- Manage Identity and Access Management (IAM) and Privileged Access Management (PAM) frameworks to ensure the principle of least privilege is enforced across all production environments.\n\n- Coordinate incident management efforts by investigating security anomalies and driving root cause analysis to prevent future occurrences and protect sensitive financial data.\n\n- Partner with software development teams to integrate application security best practices into the CI/CD pipeline, ensuring security is embedded at every stage of the development lifecycle.\n\n- Communicate security risks and compliance status to non-technical stakeholders, providing clear recommendations that align with the company's risk appetite and business goals.\nSkills\nVulnerability Management, Information Security, Cyber Security, Incident Management, CISSP, iAM, Applications Security, IPAM, ISO","description_format":"text","description_chars":1764,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-10-18T01:22:52Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.452,"p_room":0.28,"age_days":82,"expected_fill_days":25,"reasons":["seen:82","win:tail","crowd:"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/dark-horse-consulting-vulnerability-management-grc-analyst-information-security","json_url":"https://alion.io/job/dark-horse-consulting-vulnerability-management-grc-analyst-information-security.json","meta":{"generated_at":"2026-11-03T13:55:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19359,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3809819},"rest":"https://alion.io/mcp/rest/get_company?id=3809819"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdark-horse-consulting-vulnerability-management-grc-analyst-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdark-horse-consulting-vulnerability-management-grc-analyst-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdark-horse-consulting-vulnerability-management-grc-analyst-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dark-horse-consulting-vulnerability-management-grc-analyst-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdark-horse-consulting-vulnerability-management-grc-analyst-information-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2802472}},{"tool":"search_jobs","arguments":{"company":"darkhorseconsulting.co.in","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2802472},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}