Information Security Analyst

Overview

Support information security management system (ISMS), privacy, risk management and compliance activities, including audit engagements, risk assessment and certification and surveillance audits.

What you'll do

• Lead ISMS audit engagements in accordance with ISO/IEC 27001:2022, ISO/IEC 27701:2025 and TISAX requirements.
• Identify and evaluate risks to digital information, working with stakeholders to establish and implement appropriate risk mitigation measures.
• Support external certification, surveillance and client audits by coordinating evidence requests, stakeholder discussions, audit walkthroughs and management responses.
• Develop, maintain and periodically review ISMS documentation, risk registers, audit reports and corrective action plans.
• Prepare audit summaries, status updates, remediation trackers and management reports, and identify opportunities to strengthen security processes and procedures.

What you'll need

• Three to four years of hands-on experience with information security management systems, data privacy, risk management and compliance.
• Practical experience implementing or maintaining an ISO/IEC 27001-certified ISMS, including maintaining documentation and audit evidence, reviewing controls, identifying gaps and tracking remediation.
• Strong knowledge of ISO/IEC 27701:2025 requirements, privacy principles, the responsibilities of PII controllers and processors, and the personal data lifecycle.
• Knowledge of the General Data Protection Regulation (GDPR) and other applicable privacy and data protection regulations, with experience supporting certification, surveillance and recertification audits.
• ISO/IEC 27001:2022 Lead Auditor certification.

Nice to have

• Exposure to SOC 1, SOC 2, PCI DSS, IT General Controls, privacy, cloud security, third-party risk management or regulatory compliance assessments.
• CISA, CISSP, CRISC or an equivalent information security qualification.

Details

• Location: Pune, India.
• Work mode: Hybrid, three days in-office and two days virtual.