Senior Information Security Analyst - IPD - SAS

Overview

Senior Information Security Analyst to lead automation and technical execution for Information Protection Domain (IPD) controls, including prevention of production data in non-production environments, enterprise data scanning, and Data Loss Prevention (DLP).

What you'll do

• Provide information security consultation to improve awareness and compliance with Enterprise Information Security policy, processes and standards.
• Perform remediation of security assessment review issues, complex ad hoc data, and reporting to support information security risk management.
• Provide guidance and direction in reviewing assessment findings and mitigating controls to optimize information security.
• Identify and direct information asset portfolio reconciliations and certifications.
• Provide advanced data aggregation and data of information security risk exposure.
• Develop and deliver Information Security Education Awareness and Training in accordance with the Enterprise Information Security Program standards.
• Review draft and proposed control standards for business impact and recommend modifications or clarifications as required.
• Conduct security control testing and consultation with stakeholders.
• Evaluate and interpret internal and Enterprise Information Security policies, processes and standards, and provide recommendations to improve them.
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals.
• Interact with internal customers.
• Serve as a mentor to less experienced staff.
• Design, develop, and implement end-to-end automation solutions across data scanning, validation, and control workflows.
• Partner with stakeholders across multiple domains to improve control efficiency, reduce operational risk, and support the expansion of enterprise data protection capabilities.
• Design, build, and maintain automation solutions for IPD control execution, including scanning, validation, and DLP workflows.
• Develop scripts, pipelines (e.g., Python), and services to support data scanning and classification processes.
• Automate control activities, including evidence collection, validation, and compliance tracking.
• Integrate automation with enterprise platforms, such as ServiceNow for workflow intake, orchestration, and case management.
• Build and optimize data pipelines and processing workflows to support large-scale scanning and analysis.
• Troubleshoot and resolve issues across automation workflows, data pipelines, and control execution processes.
• Partner with control owners, SMEs, and stakeholders to translate control requirements into scalable technical solutions.
• Analyze control execution data to identify opportunities for automation, optimization, and risk reduction.
• Support DLP integration and automation to improve detection, response, and control coverage.
• Ensure alignment with enterprise risk and control frameworks and Information Security policies.

What you'll need

• 4+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education.

Nice to have

• Experience in information security, data protection, or technical control execution.
• Strong experience with Python or similar scripting language for automation, data processing, and workflow development.
• Experience with data scanning and/or classification tools and processes.
• Knowledge of Data Loss Prevention (DLP) and data protection controls.
• Experience working with databases, data pipelines, and large-scale data processing.
• Experience with ServiceNow or similar workflow platforms for automation, intake, or case management.
• Strong troubleshooting and problem-solving skills across systems, data, and automation workflows.
• Experience building end-to-end automation solutions supporting security or risk controls.
• Familiarity with enterprise data scanning platforms and control lifecycle processes.
• Experience integrating automation across multiple platforms and tools.
• Experience with workflow orchestration and pipeline optimization.
• Experience with data analysis and reporting to support control effectiveness and risk insights.
• Demonstrated ability to scale technical solutions across distributed teams and environments.
• Understanding of security risk, control requirements, and control execution processes.
• Experience supporting large-scale transformation from manual to automated control execution.

Details

• Location: Hyderabad, India.
• Posting end date: 6 Nov 2026.