Senior Information Security Analyst - Customer Trust

Overview

Senior Information Security Analyst supporting the Customer Trust function at Rubrik's Bangalore office, acting as a front-line, customer-facing security function that helps sales close revenue by sharing Rubrik's security posture with customers.

What you'll do

• Respond to security and compliance portions of customer RFPs accurately and within agreed internal SLAs, leveraging AI-generated responses and validating them.
• Lead and collaborate with Information Security, Product Security and Engineering SMEs to respond to customers and drive security posture outcomes.
• Build narratives and perform security reviews of new products to ensure accurate RFP responses.
• Support security and compliance related customer audits, as requested.
• Be well-versed in Rubrik's products, particularly security and compliance features and secure SDLC practices.
• Work with Sales Operations, Field Operations, Sales, Sales Engineering, Marketing and Engineering teams to intake requests and drive improvements to the customer trust process.
• Execute operational activities related to the maturity and measurement of the customer trust process to provide high quality services that enable sales.
• Drive the maturity of customer-facing collateral that disseminates security and compliance announcements and thought leadership to new customers and prospects.
• Support the finalisation of security and compliance language in customer contracts.
• Be well versed with industry leading frameworks such as DORA, ISO 27001, SOC 2, PCI DSS, HIPAA and HITRUST.
• Share Rubrik's security posture with customers by interacting with key security stakeholders in customer organizations, redlining security terms in customer contracts, and facilitating customer audits and requests related to enterprise or product security and compliance capabilities.

What you'll need

• 5+ years of related work experience in Customer Trust and Security Assurance in the tech industry.
• Experience reviewing and negotiating contracts as it relates to security and compliance obligations.
• Experience driving several security and/or operational information security processes within a company.
• Ability to meet demanding timelines and SLAs, manage changing priorities and execute tasks with minimal supervision.
• Knowledge of common security risks, vulnerabilities and threats, and ability to translate these through triage and risk treatment conversations.
• Understanding of information security frameworks and compliance requirements, such as DORA, ISO 27001/2 (including ISO 27017 and 18), FedRAMP, SOC 2 Trust Services Criteria, CIS Top 20, PCI DSS, HIPAA, and NIST CSF / 800-53.
• Detail-oriented, able to understand the bigger picture using technical expertise and problem-solving abilities to prioritize and manage blocking issues.
• Able to discuss issues at technical and business levels with audiences of various backgrounds.

Nice to have

• Experience in the cyber security practice at a Big 4 audit firm (Deloitte, PwC, EY, or KPMG).
• Experience in the tech industry, preferably in the cyber resilience space.
• Bachelor's degree in Security, Computer Science, Management Information Systems or related field.

Details

• Location: Bangalore, India (Hybrid, 3 days a week in office).