Information Security Analyst

A leading IT company

Information Security Analyst

Information Security Analyst at A leading IT company · Bengaluru (Bangalore) · 2 - 5 years · ₹6L - ₹12L / yr (ESOP available) · Posted 18 Oct 2021

Information Security Analyst

at A leading IT company

Agency job

via Sanguine Global

2 - 5 yrs

₹6L - ₹12L / yr (ESOP available)

Bengaluru (Bangalore)

Skills

Information security

ISO/IEC 27001:2005

HIPAA

The Role

We are looking foran Information Security Analyst – Compliance to primarily strengthen our practice towards compliances such as HIPAA, HITRUST,etc. and ensure highest levels of security around sensitive data.

Identifying new risks and performing risk assessments.
Performing continuous gap analysis.
Auditing the applications, configurations, and internal practices against standards such as HIPAA, HITRUST etc.
Providing advice and implementing forward-thinking information security policies, procedures, and standards.
Assisting several teams (internal and external) with best practicesand security consultations.
Supporting with other information security activities as assigned.
Ensuring the organizational compliance during audits and certification efforts.

Requirements:

Demonstrated experience in implementing and maintaining security standards such as HIPAA, HITRUST, SOC2, ISO 27001 etc.
Ability to understand and interpret legal, regulatory, and contractual compliance requirements.
Experience in InfoSec policy creation and documentation.
Ability to understand technology and pertaining risks.
Knowledge on IT, Servers, SDLC, Database, etc.
Experience working with / securing cloud-based applications is an add-on.
2+ years of experience.
Excellent written and verbal communication skills.
Relevant Security Certifications will be a good add-on.

The Role

Identifying new risks and performing risk assessments.
Performing continuous gap analysis.
Auditing the applications, configurations, and internal practices against standards such as HIPAA, HITRUST etc.
Providing advice and implementing forward-thinking information security policies, procedures, and standards.
Assisting several teams (internal and external) with best practicesand security consultations.
Supporting with other information security activities as assigned.
Ensuring the organizational compliance during audits and certification efforts.

Requirements:

Demonstrated experience in implementing and maintaining security standards such as HIPAA, HITRUST, SOC2, ISO 27001 etc.
Ability to understand and interpret legal, regulatory, and contractual compliance requirements.
Experience in InfoSec policy creation and documentation.
Ability to understand technology and pertaining risks.
Knowledge on IT, Servers, SDLC, Database, etc.
Experience working with / securing cloud-based applications is an add-on.
2+ years of experience.
Excellent written and verbal communication skills.
Relevant Security Certifications will be a good add-on.

Users love Cutshort

Read about what our users have to say about finding their next opportunity on Cutshort.

Shubham Vishwakarma

Full Stack Developer - Averlon

I had an amazing experience. It was a delight getting interviewed via Cutshort. The entire end to end process was amazing. I would like to mention Reshika, she was just amazing wrt guiding me through the process. Thank you team.

Companies hiring on Cutshort

Similar jobs (2)

Cybersecurity

at NAM Info Pvt Ltd

Posted by Ramya Munirathnam

Bengaluru (Bangalore), Chennai, Hyderabad, Mumbai, Pune

5 - 7 yrs

₹6L - ₹12L / yr

Cyber Security

GRC

Security Compliance

This role is focused on Cyber Security Risk, Governance, Risk & Compliance (GRC), IT Controls, and Security Audits, with strong emphasis on Backup, Disaster Recovery (DR), and Business Continuity (BCP).

Key responsibilities:

Perform security control assessments against organizational policies, security standards, and regulatory requirements.
Identify control gaps, risks, audit findings, and compliance issues, and monitor remediation until closure.
Assess Backup, Disaster Recovery, and Business Continuity processes and controls.
Validate backup availability, restoration/recovery procedures, DR readiness, and evidence of periodic DR/BCP testing.
Conduct control testing and risk assessments and support internal/external security audits.
Review security policies, procedures, standards, and governance frameworks for compliance.
Maintain audit evidence, track findings, and coordinate with stakeholders for remediation.
Support overall security governance, regulatory compliance, and IT risk management activities.

Required Skills

Cyber Security Risk & Compliance / GRC
IT Risk & Controls
Security Control Assessment & Testing
Security Audits
Backup & Disaster Recovery
BCP / DR
Risk Assessment
Compliance & Governance
Security Policies & Standards
Audit Finding & Remediation Management

Key responsibilities:

Perform security control assessments against organizational policies, security standards, and regulatory requirements.
Identify control gaps, risks, audit findings, and compliance issues, and monitor remediation until closure.
Assess Backup, Disaster Recovery, and Business Continuity processes and controls.
Validate backup availability, restoration/recovery procedures, DR readiness, and evidence of periodic DR/BCP testing.
Conduct control testing and risk assessments and support internal/external security audits.
Review security policies, procedures, standards, and governance frameworks for compliance.
Maintain audit evidence, track findings, and coordinate with stakeholders for remediation.
Support overall security governance, regulatory compliance, and IT risk management activities.

Required Skills

Cyber Security Risk & Compliance / GRC
IT Risk & Controls
Security Control Assessment & Testing
Security Audits
Backup & Disaster Recovery
BCP / DR
Risk Assessment
Compliance & Governance
Security Policies & Standards
Audit Finding & Remediation Management

Security Analyst

One of our US based Client

Agency job

via HyrHub by Shwetha Naik

Remote only

4 - 8 yrs

Best in industry

IT security

IT security audit

GDPR

The Security Analyst assists the Data Security team to help ensure the security of the company and its clients. Looking for immediate joiners.

KEY RESPONSIBILITIES

All employees are expected to use good business judgment and appropriate discretion and decision making while performing responsibilities of the position, and to incorporate EVA’s Core Beliefs in their daily work.

Performs daily health checks as documented by the IT Security team.
Supports the Security team by documenting and performing support tasks.
Participates in change management, incident management, audit and business continuity processes.
Plans and implements security policies and procedures to protect computer systems, networks and data from unauthorized access.
Participates in internal and external compliance (SOC 2) audits.
Recommends security enhancements.

Job specifics:

Familiarity with standard security concepts, practices and procedures.
Knowledge of Windows operating systems.
Strong Documentation, communication skills and attention to detail.
Able to work independently and as a part of a team to deliver completed projects on-time.
Identifies ways to continuously improve own and/or company performance.
Knowledge of security toolsets
Knowledge of compliance activities (GDPR, SOC 2, ISO:27001).
Knowledge of database security.
Knowledge of SIEM technology and security event correlation and monitoring.
Experience with AWS.
Proficient with computer software including Salesforce

EDUCATION & EXPERIENCE

Bachelor’s Degree in computer science, mathematics, Information Systems or equivalent experience preferred.
Minimum of 3 years of hands-on IT Security & Audit experience.
Professional IT Security Certifications are strongly preferred, such as Security+, CISSP, CISM, CISA, GSEC, etc.

The Security Analyst assists the Data Security team to help ensure the security of the company and its clients. Looking for immediate joiners.

KEY RESPONSIBILITIES

Performs daily health checks as documented by the IT Security team.
Supports the Security team by documenting and performing support tasks.
Participates in change management, incident management, audit and business continuity processes.
Plans and implements security policies and procedures to protect computer systems, networks and data from unauthorized access.
Participates in internal and external compliance (SOC 2) audits.
Recommends security enhancements.

Job specifics:

Familiarity with standard security concepts, practices and procedures.
Knowledge of Windows operating systems.
Strong Documentation, communication skills and attention to detail.
Able to work independently and as a part of a team to deliver completed projects on-time.
Identifies ways to continuously improve own and/or company performance.
Knowledge of security toolsets
Knowledge of compliance activities (GDPR, SOC 2, ISO:27001).
Knowledge of database security.
Knowledge of SIEM technology and security event correlation and monitoring.
Experience with AWS.
Proficient with computer software including Salesforce

EDUCATION & EXPERIENCE

Bachelor’s Degree in computer science, mathematics, Information Systems or equivalent experience preferred.
Minimum of 3 years of hands-on IT Security & Audit experience.
Professional IT Security Certifications are strongly preferred, such as Security+, CISSP, CISM, CISA, GSEC, etc.

Why apply to jobs via Cutshort