Senior Information Security Assurance Analyst

Overview

Senior Information Security Assurance Analyst to mature and scale Take-Two's security assurance program, independently leading audits, assessments and control reviews across the Labels and serving as a trusted advisor to stakeholders.

What you'll do

• Independently lead label, studio, and enterprise security audits, assessments, and control reviews from planning and scoping through testing, findings, remediation, and closure.
• Evaluate control design, implementation, operating effectiveness, and technical evidence using a risk-based assurance approach.
• Identify control deficiencies and systemic weaknesses, assess business and security impact, and develop actionable remediation recommendations.
• Independently validate remediation and compensating controls before closing identified findings.
• Serve as a key operational lead for internal, external, partner, and regulatory audits and assessments, ensuring evidence is complete, relevant, and sufficient.
• Translate regulatory, contractual, and internal security requirements into practical control expectations and assurance activities.
• Maintain and continuously improve the enterprise security control framework and its alignment to standards such as NIST CSF, CIS Controls, PCI DSS, and other applicable requirements.
• Drive continuous assurance initiatives that move the organization beyond point-in-time compliance toward repeatable and ongoing control validation.
• Partner with Security Engineering and Platform teams to streamline evidence collection, reduce manual audit effort, and automate control monitoring and assurance workflows.
• Lead high-level discussions with Label and business stakeholders to communicate control deficiencies, navigate competing priorities, and drive risk-informed remediation decisions.
• Provide clear, evidence-based reporting to Information Security leadership on control effectiveness, systemic weaknesses, remediation progress, and emerging assurance risks.
• Provide subject-matter guidance, mentoring, and peer review to other GRC team members to improve the consistency and quality of assurance activities.
• Identify opportunities to standardize, automate, and continuously improve assurance methodologies, processes, and reporting across T2 and its Labels.

What you'll need

• Minimum of 5 years of progressive experience in Information Security Assurance, IT Audit, GRC, Security Compliance, or a related control assessment function.
• Proven experience independently planning and executing security audits, assessments, or control reviews, including evaluating control design, implementation, operating effectiveness, and supporting evidence.
• Strong understanding of information security control frameworks and standards, including NIST CSF, CIS Controls, and relevant regulatory or contractual requirements.
• Demonstrated ability to identify control deficiencies, assess risk and business impact, develop remediation recommendations, and validate corrective actions.
• Experience translating technical security findings and control requirements into clear, actionable guidance for technical and non-technical stakeholders.
• Experience working with GRC, workflow, evidence management, and ticketing platforms such as ServiceNow and Jira.
• Demonstrated ability to lead complex initiatives, manage competing priorities, and operate independently with limited managerial oversight.
• Strong analytical and critical-thinking skills, with the ability to challenge insufficient evidence and make defensible, risk-based judgments.
• Exceptional written and verbal communication skills, including the ability to communicate effectively with senior security, technology, engineering, and business stakeholders.
• Proven ability to influence outcomes and drive remediation across federated teams without relying on direct authority.
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Business Administration, or a related field; or equivalent professional experience.

Nice to have

• Experience with ServiceNow GRC/AVR.
• Professional information security, audit, or risk certifications (e.g., CISA, CRISC, CISSP, CISM, or ISO 27001 Lead Auditor).
• Experience within a large-scale, decentralized, or federated environment.

Details

• Location: Bangalore, Karnataka, India.