Assistant Manager Internal Security

. This role supports both cloud and on-premises environments and collaborates across teams to uphold information security, regulatory compliance, and business continuity.Key ResponsibilitiesInvestigate and respond to security incidents, taking appropriate action based on severity.Handle and resolve GRC-related (Governance, Risk, and Compliance) email queries.Review access requests and tickets to ensure alignment with organizational policies.Conduct and monitor Access Review Audits across Cloud (AWS, Azure) and On-Premise environments.Ensure annual Business Continuity drills are planned and executed.Coordinate and support internal and external audits for PCI DSS, ISO 27001, and ISO 27701 compliance.Respond to and complete client due diligence and security assessment requests.Ensure timely vulnerability assessments for all new servers and web applications.Implement CIS Benchmark controls across systems.Review cloud security group configurations (AWS, Azure, GCP) for adherence to best practices.Lead initiatives to improve Cloud Security Posture, including hardening systems and ensuring compliance.Evaluate all new software and tools from an information security risk and compliance standpoint.Requirements:Minimum 5 years of .Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent professional .Strong knowledge of compliance audits and frameworks (PCI DSS, ISO 27001, ISO 27701) and GRC practices.Hands-on .Familiarity with CIS Benchmarks, BCP/DR practices, and security configuration management.Proven skills in documentation for audits, risk assessment, and collaboration across technical teams.Excellent communication, analytical, and problem-solving abilities with the ability to manage multiple priorities.