Senior Information Security Analyst

Overview

Support the Global Information Security organization in security governance, risk management, compliance oversight and security assurance activities at Amex GBT.

What you'll do

• Participate in internal security assessments and security reviews, and conduct security risk analysis of business processes and technology solutions against internal security policies and standards, regulatory and industry requirements, and security best practices.
• Support annual security compliance audits (e.g., PCI DSS, SOC 1/SOC 2, ISO 27001:2013).
• Support the third-party/vendor security risk assessment process; monitor and report on progress of third-party/vendor security risk treatment activities by business owners.
• Support the Sales process by participating in customer-initiated security due diligence and/or vendor qualification audits, reviewing security terms in customer contracts, and helping to respond to security questionnaires and documentation requests from customers.
• Assist with maintenance of information security program documentation (policies, standards and guidelines) and coordinate management ratification of policies and standards at regular intervals.
• Participate in improving the overall security culture across CWT, contributing to employee security awareness campaigns and educational activities.
• Lead and support technical data encryption remediation efforts in coordination with Cybersecurity Operations and Enterprise IT.

What you'll need

• Bachelor's degree in Information Security, Computer Science, Information Technology, or related field.
• Experience in information security, risk management, compliance, audit, or third-party risk management.
• Working knowledge of security frameworks and regulations including PCI DSS, ISO 27001, SOC 1/SOC 2, GDPR, NIST CSF, and CIS Controls.
• Experience supporting client security assessments, audits, or security questionnaire responses.
• Strong analytical, documentation, and stakeholder management skills.
• Proficiency in Microsoft Excel, PowerPoint, and reporting tools.
• Excellent communication skills with the ability to work effectively across global teams and business functions.

Nice to have

• Technical skills on MS-Excel, scripting and automation.
• Experience with automation, scripting, data analytics, Power Automate, Python, or similar technologies (highly desirable).
• Professional certifications such as CISA, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, Security+, or equivalent (preferred).

Details

• Location: Gurgaon, India.