Information Security Analyst

Experience & Work Details

• Job Title: Information Security Analyst
• Experience: 3 - 5 years
• Location: Mohan Estate, Delhi, India (Work from Office)
• Working Days/Hours: Monday - Friday, 8:00 AM - 5:00 PM
• Employment Type: Full-time

About The Role

We are looking for a detail-oriented and proactive Information Security Analyst to join our team. The ideal candidate will play a critical role in safeguarding organizational data, ensuring compliance with industry standards, and supporting ongoing risk management initiatives.

Key Responsibilities

• Support ISO 27001 and SOC 2 Type II compliance, including audits and evidence collection.
• Conduct risk assessments, vulnerability scans, and security audits.
• Develop, implement, and monitor security policies and procedures.
• Manage vendor risk assessments and ensure data protection compliance.
• Draft and maintain security documentation (policies, agreements, terms of use).
• Collaborate with teams to embed Privacy by Design/Default in systems and processes.
• Recommend and implement risk mitigation measures.

Qualifications & Skills

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• 3-5 years of proven experience in information security, compliance, or risk management.
• Knowledge of ISO 27001, GDPR, and data protection best practices.
• Experience with vulnerability assessment tools, risk analysis frameworks, and incident response.
• Strong analytical and documentation skills.
• Ability to work effectively in a fast-paced, office-based environment.

Preferred Certifications (Having Them is a Plus)

• ISO 27001 Lead Implementer/Auditor
• CompTIA Security+, CISA, CISM, or equivalent
• Any other certification demonstrating job-related skills in information security, risk management, or compliance

Additional Skills/Experience

• Cloud Security: AWS, Azure, or GCP controls.
• Security Operations: SIEM tools (Splunk, ELK, QRadar), incident response.
• Compliance: Exposure to HIPAA, PCI-DSS, NIST, or ISO 27701.
• Testing: Penetration testing & threat modeling.
• Tools: DLP and endpoint protection.
• Soft Skills: Strong communication; ability to explain risks in business terms.