Senior Analyst - Business Information Security

• Conduct
  comprehensive security risk assessments for new and existing systems,
  applications, and network infrastructure.



• Develop,
  implement, and maintain security frameworks, standards, and best practices
  across the organization.



• Oversee
  third-party risk management (TPRM), including due diligence, assessment,
  and continuous monitoring of vendor security posture.



• Collaborate
  with IT, engineering, and business teams to identify and mitigate security
  risks in design and deployment.



• Perform
  Security Architecture reviews, risk assessments and gap analysis on
  critical assets and business processes.



• Advise
  stakeholders on security solutions and controls, ensuring alignment with
  regulatory and industry standards (HIPAA, ISO 27001, NIST CSF 2.0, GDPR,
  DPDPA).



• Respond
  to emerging threats and vulnerabilities by recommending proactive security
  measures.



• Prepare
  and deliver clear reports on architectural and risk findings to senior
  management. Support compliance initiatives and internal or external audits
  related to security and risk management.



• Conduct
  Privacy Impact Assessments (PIAs) and evaluate privacy risks to ensure
  compliance with DPDPA, HIPAA, and GDPR across systems and business
  processes. Identify data protection gaps, recommend mitigation strategies,
  and support the implementation of controls to safeguard sensitive and
  personal information.



• Drive
  continuous improvement in security architecture, risk practices, and
  awareness throughout the organization.



• Participate
  in special projects and other duties as assigned, driving ongoing
  improvement in security posture, risk management, and protection of
  sensitive information.

What would your work week be like

• Conduct
  risk assessments and manage third-party vendor reviews or renewals.



• Participate
  in meetings with engineering, compliance, and business teams to discuss
  security requirements and remediation plans.



• Review
  and evaluate architecture diagrams and technical designs for ongoing and
  upcoming projects.



• Monitor
  security controls, metrics, incident reports, and issues to identify and
  respond to risks or weaknesses.



• Prepare
  documentation, executive summaries, and presentations for decision makers
  and stakeholders.

Required Qualifications

• Bachelor?s
  degree in information technology, Computer Science, or a related field, along
  with 5 or more years of relevant experience.



• A
  professional with strong experience in both security, architecture and
  risk management, ideally in complex or regulated environments.



• Proven
  ability to communicate technical concepts and security risks to both
  technical and non-technical audiences.



• Experience
  conducting third-party risk assessments and managing vendor relationships.



• Expertise
  in industry standards, regulatory compliance, and security frameworks.



• A
  proactive problem-solver with excellent analytical, organizational, and
  stakeholder management skills.



• Basic
  knowledge of AI technologies such as Generative AI, Artificial Neural
  Networks (ANN), Convolutional Neural Networks (CNN), and AI security.