Security Analyst II

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field.

4-7 years of experience in Information Security, Compliance, Risk Management, Audit Support, or GRC functions.

Experience handling customer security questionnaires, due diligence assessments, and compliance audits.

Experience working with enterprise customers, preferably in Banking and Financial Services (BFSI) environments.

Strong understanding of information security principles, privacy requirements, and governance practices.

Job Description - Analyst / Senior Analyst, Information Security

Position

Analyst / Senior Analyst - Information Security

Location

Noida (Hybrid - 3 Days Work from Office)

About the Role

We are looking for a highly motivated Analyst /Senior Analyst - Information Security to support our Information Security, Privacy, and Compliance functions. The role is focused on managing customer security assessments, audit support activities, compliance-related engagements, internal audits and coordination with internal stakeholders to ensure timely and accurate responses to customer information security and privacy requirements.

The ideal candidate should have a strong understanding of information security frameworks, privacy principles, secure software development practices, and experience supporting customer audits in a technology-driven environment. Experience working with BFSI (Banking, Financial Services, and Insurance) clients will be an advantage.

Key Responsibilities

Customer Audit & Assessment Management

• Manage and coordinate customer information security assessments, due diligence questionnaires, and audit requests.
• Act as the primary point of contact for customer security and compliance inquiries.
• Track, monitor, and follow up on customer audit requests to ensure timely closure.
• Prepare and review responses related to information security, privacy, compliance, and operational controls.
• Support customer-led audits, reviews, and compliance assessments.

Stakeholder Coordination

• Collaborate with Engineering, DevOps, Product, Legal, Privacy, Infrastructure, HR, and Operations teams to gather evidence and required documentation.
• Coordinate with cross-functional teams to obtain responses, policies, procedures, certifications, and technical evidence requested by customers.
• Drive closure of customer action items and audit observations through regular follow-ups.

Information Security & Compliance

• Support maintenance and continuous improvement of Information Security and Privacy Management Systems.
• Assist in compliance activities related to ISO 27001, ISO 27701, SOC 2 Type II, ISO 9001, and other applicable standards.
• Review customer security requirements and map them against organizational controls.
• Support risk assessments, control reviews, and compliance reporting activities.
• Assist in developing and maintaining security and privacy documentation, policies, standards, and procedures.

Security & Privacy Advisory

• Provide guidance on security controls, privacy requirements, and compliance obligations to internal stakeholders.
• Support customer discussions related to information security, privacy, data protection, and secure development practices.
• Stay updated on emerging security threats, privacy regulations, and industry best practices.

Reporting & Governance

• Maintain audit trackers, assessment dashboards, and compliance metrics.
• Prepare management reports and status updates for leadership and stakeholders.
• Support internal and external audit activities as required.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field.
• 4-7 years of experience in Information Security, Compliance, Risk Management, Audit Support, or GRC functions.
• Experience handling customer security questionnaires, due diligence assessments, and compliance audits.
• Experience working with enterprise customers, preferably in Banking and Financial Services (BFSI) environments.
• Strong understanding of information security principles, privacy requirements, and governance practices.

Required Knowledge & Skills

Security & Compliance Frameworks

Working knowledge of:

• ISO 27001
• ISO 27701
• SOC 2 Type II
• Secure Software Development Lifecycle (SSDLC)
• Information Security Risk Management
• Security Controls and Governance

Technical Understanding

• Secure software development practices
• Application security concepts
• Cloud security fundamentals (AWS/Azure/GCP)
• Vulnerability management concepts
• Identity and Access Management concepts
• Data protection and encryption concepts

Privacy & Regulatory Awareness

Understanding of:

• Privacy management principles
• Data protection regulations
• Customer and regulatory compliance requirements
• Third-party risk management concepts

Soft Skills

• Excellent written and verbal communication skills.
• Strong stakeholder management and coordination abilities.
• Ability to manage multiple customer engagements simultaneously.
• Strong analytical and documentation skills.
• Attention to detail and ability to work independently.

Preferred Certifications

Any one or more of the following certifications will be preferred:

• ISO 27001 Lead Implementer / Lead Auditor
• ISO 27701 Lead Implementer / Lead Auditor
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• Certified in Cybersecurity (CC)
• CompTIA Security+
• Certified Ethical Hacker (CEH)

Preferred Experience

• Experience in CPaaS, SaaS, Cloud, FinTech, or Telecommunications environments.
• Experience supporting banking and financial sector customers.
• Exposure to customer audits from large enterprises, banks, or regulated industries.
• Experience responding to RFPs, security questionnaires, and vendor risk assessments.

What We Offer

• Opportunity to work with leading banking and enterprise customers.
• Exposure to security, privacy, and compliance frameworks.
• Collaborative and fast-paced technology environment.
• Hybrid working model (3 days from Noida office).

Experience: 4-7 Years
Employment Type: Full-Time
Location: Noida (Hybrid - 3 Days Work from Office)