information security analyst

Wells Fargo

<div>About this role: 
 
Wells Fargo is seeking a Information Security Analyst. 
 
In this role, you will:<ul><li>
Participate and identify security risks companywide and ensure that appropriate data security procedures and products are implemented</li><li>
Maintain an awareness of bank security policies and government regulations pertaining to information security</li><li>
Review the development, testing, and implementation of security plans, products, and control techniques</li><li>
Develop and implement security standards, procedures, and guidelines for multiple platforms and diverse systems environments</li><li>
Investigate and recommend appropriate corrective actions for data security incidents</li><li>
Identify regulatory changes that will affect information security policy, standards, procedures, and recommend appropriate changes</li><li>
Provide security consulting and project management services on highly complex information security projects and issues</li><li>
Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals</li><li>
Interact with internal customers</li><li>
Receive direction from leaders and exercise independent judgment while developing the knowledge to understand function, policies, procedures, and compliance requirements</li></ul>
Required Qualifications:<ul><li>
2+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education</li></ul>
Desired Qualifications:
<ul><li>Bachelor of Engineering Degree, preferably of Computer science or Information Technology</li><li>
2+ years hands on Windows platform and Active Directory Provisioning.</li><li>
Knowledge and experience with any IAM, Provisioning, role management and certification tool</li><li>
Knowledge and experience on Applications Infrastructure in a Large Enterprise environment.</li><li>
Must have knowledge on server OS 2008/ 2012, 2016 AD structure &amp; database</li><li>
Demonstrated experience in enterprise wide ticketing tools like Remedy, Zendesk, Service now etc.</li><li>
Strong knowledge and understanding of information security and IAM practices and policies</li><li>
Experience with Service Delivery and SLAs/KPIs monitoring. Proven ability for high volume/high quality results</li><li>
Ability to interact with integrity and a high level of professionalism with all levels of team members and management</li><li>
Strong verbal, written, and interpersonal communication skills.
</li><li>Ability to learn and assimilate information from multiple people and sources</li><li>
Excellent customer service skills. Ability to research and correspond with customers, responding to their questions and concerns with detailed information
</li><li>Ability to make timely and independent decisions while working in a fast-paced and results-driven environment</li><li>
Strong analytical skills with high attention to detail and accuracy</li><li>
Ability to work effectively, as well as independently, in team environment.</li><li>
Must be flexible to work in shifts &amp; be available for business meetings/team deliverables within/outside of ones shift</li><li>
Must have leadership skills, to be resilient and drive changes. Ability to maintain composure under pressure and deadlines in a dynamic environment</li><li>
Good understanding on AD Schema, partitions and Shell Scripting.</li></ul><ul><li>
Knowledge on DNS, DHCP, Group policies, Sites, FSMO roles and replication.</li><li>
Knowledge on escalation processes/matrix and ability to prioritize tasks</li><li>
Ability to collaborate effectively with different teams, accept challenging assignments and foster robust working relationships with teams.</li><li>
Mentoring skills to help the team explore ideas and make them successful.</li></ul>
Posting End Date:
 
29 Sep 2025 
*Job posting may come down early due to volume of applicants.
 
 
We Value Equal Opportunity 
 
Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic. 
 
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements. 
 
Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process. 
 
Applicants with Disabilities 
 
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo . 
 
Drug and Alcohol Policy 
 
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more. 
 
Wells Fargo Recruitment and Hiring Requirements: 
 
a. Third-Party recordings are prohibited unless authorized by Wells Fargo. 
 
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.</div>

Information Security Analyst

Deutsche Bank

<div><div><h1 class="jobSectionHeader">Information Security Analyst, AVP
</h1><div><div><div><div><div>Job ID: R0402118 </div><div>Full/Part-Time: Full-time
</div></div> 
<div><div>Regular/Temporary: Regular </div><div>Listed: 2025-09-15
</div></div> 
<div><div>Location: Bangalore
</div></div> 
</div></div></div><h2 class="jobSectionHeader">Position Overview
</h2>Job Title: Information Security Analyst, AVP
Location: Bangalore, India
Role Description
The Risk Lead Function covering Chief Security Office (CSO) CTO, IS Threat Operations and Office of the CSO is looking for an Information Security Specialist who will support the Risk Lead in managing the risk, audit and regulatory portfolio. The job plays a vital role in fulfilling internal and external control requirements, ensuring transparency around the current risk exposure and guiding the organization within an ever-changing regulatory landscape.
We are looking for a candidate with an independent work attitude, and excellent problem-solving skills, who can work on multiple tasks in parallel and can cope with tight timelines.
What we&rsquo;ll offer you
As part of our flexible scheme, here are just some of the benefits that you&rsquo;ll enjoy
<ul><li>Best in class leave policy
</li><li>Gender neutral parental leaves
</li><li>100% reimbursement under childcare assistance benefit (gender neutral)
</li><li>Sponsorship for Industry relevant certifications and education
</li><li>Employee Assistance Program for you and your family members
</li><li>Comprehensive Hospitalization Insurance for you and your dependents
</li><li>Accident and Term life Insurance
</li><li>Complementary Health screening for 35 yrs. and above
</li></ul>Your key responsibilities
<ul><li>Partners and builds strong relationships with Embedded Risk Teams, Risk Lead Peers, CSO teams, regulatory engagement groups and Subject Matter Experts.
</li><li>Oversees Issue and Finding Remediation Activities and reports on progress, escalates delays and ensures a timely closure of existing risks Issue (both Audit and Self Identified Issues) Tracking and Reporting.
</li><li>Provides Risk Advisory and consultancy for Subject Matter Experts stakeholders during finding remediation, audit and regulatory engagements, interfaces with audit functions and coordinates audit engagements.
</li><li>Questions existing processes and highlights potential risk exposures to initiate appropriate activities for further risk reduction.
</li></ul>Your skills and experience
<ul><li>Holds a Bachelor&rsquo;s degree in Computer Science, Engineering, Information Security or equivalent and ideally industry certifications like CISSP, CISM, CISA and / or CRISC.
</li><li>Has several years of experience working in Information Risk and Security and working on regulations in the financial industry.
</li><li>Familiarity with risk registers, documentation and reporting, controls and frameworks
</li><li>Excellent English skills, both written and verbal
</li><li>Possesses very good analytical skills, with the ability to break down complex problems into actionable and understandable steps, balancing security requirements with business needs
</li><li>Ability to communicate IT security issues to other business areas in technical and non-technical language, as the candidate will liaise with the respective stakeholders and translate technical risk into business language
</li></ul>How we&rsquo;ll support you
<ul><li>Training and development to help you excel in your career
</li><li>Coaching and support from experts in your team
</li><li>A culture of continuous learning to aid progression
</li><li>A range of flexible benefits that you can tailor to suit your needs
</li></ul>About us and our teams
Please visit our company website for further information:
https://www.db.com/company/company.htm
We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.
 
Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.
 
We welcome applications from all people and promote a positive, fair and inclusive work environment.</div></div>

Information Security Analyst, AVP

HugoBank

<div>Are you passionate about cyber threat detection and response? We are seeking a Cybersecurity Analyst to monitor, analyze, and triage security alerts, ensuring a proactive defense against evolving threats in a Digital Retail Bank (DRB) environment. This role involves SIEM monitoring, incident handling, vulnerability management, and compliance enforcement to maintain the highest security standards. If you have experience in threat intelligence, log analysis, and security policy implementation, this is the perfect opportunity to contribute to a dynamic and cutting-edge cybersecurity team.
Requirements
Threat Monitoring &amp; Detection:<ul>
<li>Monitor and analyze SIEM alerts to detect potential security incidents.</li>
<li>Conduct log analysis from firewalls, servers, applications, and endpoint security tools.</li>
<li>Develop and refine correlation rules and use cases to improve threat detection.</li>
<li>Utilize threat intelligence sources to enhance anomaly detection and response.</li>
</ul>Incident Response:<ul>
<li>Perform initial triage and incident handling to assess potential threats.</li>
<li>Conduct root cause analysis to determine the impact and scope of security events.</li>
<li>Maintain detailed incident documentation for compliance and reporting purposes.</li>
</ul>Vulnerability Management:<ul>
<li>Perform vulnerability scanning and risk assessment to identify security gaps.</li>
<li>Support penetration testing efforts and assist in remediation strategies.</li>
<li>Develop and implement risk mitigation plans to reduce attack vectors.</li>
</ul>Security Policy &amp; Compliance:<ul>
<li>Ensure adherence to regulatory security frameworks (PCI DSS, ISO 27001, SBP regulations).</li>
<li>Conduct security awareness training for internal teams.</li>
<li>Monitor compliance with security policies and recommend necessary improvements.</li>
</ul>Research &amp; Continuous Improvement:<ul>
<li>Stay updated on emerging threats, attack techniques, and cybersecurity trends.</li>
<li>Continuously optimize SIEM correlation rules and fine-tune detection mechanisms.</li>
<li>Enhance security operations processes to improve efficiency.</li>
</ul>Collaboration &amp; Third-Party Security:<ul>
<li>Work closely with internal security teams and third-party service providers to correlate threat intelligence.</li>
Collaborate with IT and business units to enhance overall cyber resilience. 
<li>
</li></ul>Requirements 
<ul>
<li>Bachelor&rsquo;s degree in Computer Science, IT, Cybersecurity, or a related field.</li>
<li>4-6 years of experience in infrastructure security, SIEM monitoring, or threat intelligence.</li>
<li>Strong understanding of network protocols, firewalls, VPNs, IDS/IPS, and endpoint security.</li>
<li>Proficiency in using SIEM solutions (QRadar, Splunk, ArcSight, Wazuh, etc.).</li>
<li>Expertise in vulnerability assessment, threat modeling, and risk analysis.</li>
<li>Hands-on experience with security tools (Metasploit, Burp Suite, Nessus, etc.).</li>
<li>Experience in policy development, security guidelines, and compliance frameworks.</li>
<li>Proficiency in scripting languages (Python, PowerShell, SPL, SQL) for security automation.</li>
Professional certifications such as CISSP, CEH, OSCP, or vendor-specific security credentials are a plus. 
<li>
</li></ul>Objectives &amp; KPIs<ul>
<li>Mean Time to Detect (MTTD): Average time taken to detect, analyze, and escalate security incidents.</li>
<li>Incident Resolution Rate: Percentage of incidents resolved within predefined SLAs.</li>
<li>Alert Accuracy: Ratio of false positives vs. true positives identified in SIEM alerts.</li>
<li>SIEM Optimization: Percentage of correlation rules and use cases updated or improved.</li>
<li>Root Cause Analysis (RCA) Completion: Percentage of incidents with a thorough RCA report.</li>
<li>Rule Tuning Frequency: Regular enhancements to improve SIEM efficiency and reduce unnecessary alerts.</li>
<li>Regulatory Compliance: Percentage of adherence to SBP regulations, PCI DSS, ISO 27001, and security standards.</li></ul></div>

Everbank

<div>Sr Information Security Analyst 
The Sr. Info Security Analyst drafts, communicates, implements, enforces and monitors the organization's security controls to protect technology assets from intentional or inadvertent modification, disclosure or destruction. Under limited supervision, this job works independently to manage and monitor the organization's IT systems and networks to ensure the security and safety of the organization's information. 
 
Key Responsibilities and Duties
<ul>
<li>Ensures implementation of secure operating systems, networks and databases for the organization.</li>
<li>Performs complex risk assessments and executes tests of data processing system to ensure functioning of data processing activities and security measures.</li>
<li>Drafts plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.</li>
<li>Encrypts data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.</li>
<li>Facilitates risk audits and assessments and provides recommendations for application design to ensure operating effectiveness.</li>
<li>Monitors analysis of system access logs, ensuring only permitted individuals have access to company information.</li>
<li>Reviews violations of computer security procedures and discusses procedures with violators to ensure violations are not repeated.</li>
<li>Trains users and promotes security awareness to ensure system security and to improve server and network efficiency.</li>
</ul>
Minimum Qualifications
<ul>
<li>3 years of experience in cybersecurity</li>
<li>Experience with Fraud Prevention strategies</li>
</ul>
Preferred Qualifications 
<ul>
<li>5+ years of experience in cybersecurity</li>
<li>Advanced knowledge and understanding of Fraud Vulnerabilities</li>
<li>Experience in the following areas
<ul>
<li>Risk Assessments including Fraud:
<ul>
<li>Conduct risk assessments with vendors to identify potential fraud vulnerabilities in business processes and information systems (including 3rd party reviews).</li>
<li>Evaluate internal controls and recommend improvements to reduce fraud risk exposure.</li>
<li>Leverage threat intelligence and vulnerability management platforms to assess, prioritize, and report security vulnerabilities that could be exploited for fraud.</li>
</ul>
Cyber and Fraud Prevention Strategy:
<ul>
<li>Design and implement fraud prevention programs, including monitoring systems and policies to mitigate fraudulent activities.</li>
<li>Work with the Security Operations Center (SOC) to continuously monitor for suspicious activities across digital platforms.</li>
<li>Collaborate with fraud prevention and cybersecurity teams to analyze attack patterns and emerging fraud vectors, implementing proactive controls to minimize risk.</li>
</ul>
Compliance &amp; Regulatory Adherence:
<ul>
<li>Policy and Standards including customer authentication, verification, and fraud prevention.</li>
<li>Ensure that business units comply with relevant fraud-related regulations, such as GLBA, NIST, and anti-money laundering (AML) requirements.</li>
<li>Stay up to date with fraud-related legal and regulatory changes to maintain compliance.</li>
<li>Assist in developing and enforcing security standards and fraud detection practices that align with compliance mandates and reduce exposure to regulatory penalties.</li>
</ul>
</li></ul></li></ul>Educational Requirements
<ul>
<li>University (Degree) Preferred</li>
</ul>
Role Specific Work Experience
<ul>
<li>3+ Years Required; 5+ Years Preferred</li>
</ul>
Physical Requirements
<ul>
<li>Physical Requirements: Sedentary Work</li>
</ul>
Career Level 
7IC
Requirements:
Posting end date - 9/27/2025 
 
Req Benefits:
EverBank, N.A. is committed to the well-being of its associates. That's why we offer a comprehensive Total Rewards package commensurate with the position and job-related qualifications, skills and knowledge. The Company's comprehensive Total Rewards package provides choice and flexibility and respects differences. The following benefits are available through the Company:
<ul>
<li>Medical, dental, vision &amp; HSA/FSA
</li><li>401(k) savings</li>
<li>Paid holidays &amp; generous PTO</li>
<li>Additional wellness &amp; voluntary benefits</li>
</ul>
<div>Additional Company-provided benefit options (subject to plan terms):
<ul>
<li>Tuition reimbursement</li>
<li>Commuter Benefits</li>
<li>Life and Disability Insurance</li>
</ul>
</div> 
Compensation: $91,700 - $124,000
 
Additional Details :
<div>EverBank, N.A. is a nationwide specialty bank providing high-value products and services to consumer and commercial clients nationwide. As a pioneer in online banking, we offer convenient digital access for clients 24/7, in addition to phone banking services and a network of financial centers.

The Company's commitment is to deliver to our clients high-performing, high-yield solutions backed by exceptional service, always giving them the advantage they expect, to make the most of their money.

VEVRAA Federal Contractor

Member FDIC
</div>
<div></div><div>Notice to Job Seekers</div></div>

Sr. Information Security Analyst

Ameriprise Financial

<div>Evaluate and support the delivery of business solutions that align with Ameriprise Information Security policies, standards, and best practices. Candidate will be the single point of contact for assigned business projects for information security consulting engagements.
 
Performing internal audits, supporting external audits and closing the identified gaps. 
Implement and execute security evaluation processes. Provide feedback and recommendations on how to remediate security gaps exposed as part of the evaluation process.
Key Responsibilities<ul><li>
Configuration Compliance Scans/Audits</li><li>
Engaging or integrating vendor solution</li><li>
Purchasing and integrating 3rd party tools/products</li><li>
Building strong, trustworthy partnerships and value-added relationships with technology and business stakeholders.</li><li>
Performing various kinds of security assessments to identify configuration and deployment issues. This includes security interviews, security requirements analysis, and occasional hands-on security testing.</li><li>
Providing security technology engineering design leadership to technology project teams as cross committed team member. This leadership will apply to the integration of new technologies, maturing of existing technologies and retirement/de-coupling of obsolete technologies.</li><li>
Directing and recommending tactical security technology decisions including go/no-go decisions on security technology changes.</li><li>
Providing input to the regular reporting to executive management on the state of information and technology compliance.</li><li>
Must be comfortable explaining security concepts to non-technical people over the phone.</li></ul> 
Required Qualifications<ul><li>
4-6 years of experience in Information Security or/and</li><li>
2-3 Years experience in Server/Network admin</li><li>
Strong knowledge of cloud (AWS or Azure)</li><li>
Familiarity with Network/Servers/Endpoint</li></ul> 
Preferred Qualifications<ul><li>
Thought-leadership recognition in the field of Information Security.</li><li>
Security certifications, CISSP, CCSP, CISA, or Security+</li><li>
Cloud Certifications (AWS or Azure)</li><li>
ITIL Certifications</li><li>
Red Hat Certified System Administrator (RHCSA)</li><li>
Microsoft Certified Solutions Expert</li></ul>
About Our Company 
Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 125 years. We are a U.S. based financial planning company headquartered in Minneapolis with a global presence. The firm&rsquo;s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection. Be part of an inclusive, collaborative culture that rewards you for your contributions and work with other talented individuals who share your passion for doing great work. You&rsquo;ll also have plenty of opportunities to make your mark at the office and a difference in your community. So if you're talented, driven and want to work for a strong ethical company that cares, take the next step and create a career at Ameriprise India LLP.
Ameriprise India LLP is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, genetic information, age, sexual orientation, gender identity, disability, veteran status, marital status, family status or any other basis prohibited by law.<div><div><div><div><div><div><div>
Full-Time/Part-Time</div></div></div></div></div></div></div>
Full time<div><div><div><div><div><div><div>
Timings</div></div></div></div></div></div></div>
(4:45p-1:15a)<div><div><div><div><div><div><div>
India Business Unit</div></div></div></div></div></div></div>
AWMPO AWMP&amp;S President's Office<div><div><div><div><div><div><div>
Job Family Group</div></div></div></div></div></div></div>
Technology</div>

Senior Information Security Analyst

PwC Middle East

<div>
 
 Description
 
 
 
 At PwC, we measure success by our ability to create the value that our clients and our people are looking for. Our reputation lies in building lasting relationships with our clients and a focus on delivering value in all we do. We&rsquo;re a network of firms in 158 countries with more than 236,000 people who are committed to delivering world-class capabilities and quality in assurance, tax and advisory services.
 
 
 Established in the region for 40 years, PwC Middle East employs over 4,200 people across 12 countries. Complementing our depth of industry expertise and breadth of skills is our sound knowledge of local business environments across the Middle East region. Our tailored solutions help our clients meet the challenges and opportunities of doing business in the Middle East market and beyond.
 
 
 
 Line of Service
 
 
 
 Internal Firm Services
 
 
 
 Industry/Sector
 
 
 
 Not Applicable
 
 
 
 Specialism
 
 
 
 IFS - Risk &amp; Quality (R&amp;Q)
 
 
 
 Management Level
 
 
 
 Associate
 
 
 
 Job Description &amp; Summary
 
 
 
 PwC is driving major change across information and cyber security by building a centralized model to provide security services across the entire member firm network.
 
 
 Mandated at the network level, Network Information Security (NIS) operates outside Information Technology (IT) and is responsible for this major program initiative, from definition of the security strategy to the execution of the global Cyber Readiness Program, moving from local to globally-provided services.
 
 
 Our mission is to identify, control, and reduce the attack surface across the
 
 
 member firm network while increasing our adversaries&rsquo; cost of attack.
 
 
 In order to deliver the Cyber Readiness Program, the NIS team is structured into the following Pillars:
 
 
 <ul>
 <li>
 Information Security Risk and Compliance (ISRC)
 </li>
 <li>
 Chief Information Security Office (CISO)
 </li>
 <li>
 Security Architecture, Engineering, Innovation and Transformation (SAEIT)
 </li>
 <li>
 Cyber Security Services
 </li>
 <li>
 Strategy and Alliances
 </li>
 <li>
 Chief of Staff
 
 
 </li>
 </ul>
 NIS is building the first global cyber security function at PwC. Our mission protects 223,000 PwC members across 157 member firms worldwide, as well as our global clients.
 
 
 If you are seeking an exciting career with the scope to grow your cyber security skills through major change on a global scale, then NIS will empower you to do so.
 
 
 The CISO pillar within NIS is responsible for the following services:
 
 
 <ul>
 <li>
 Engagement
 </li>
 <li>
 Governance
 </li>
 <li>
 Measurement
 </li>
 <li>
 Service Interface
 
 
 </li>
 </ul>
 If you love the business side of information security this is the place to be. Within CISO pillar we work closely with member firm stakeholders to understand their business model and roadmap for technology. In turn CISO pillar outline the roadmap for NIS and drive engagement and adoption of central security services in line with the PwC Cyber Readiness program. Management of relationships between NIS and the business is key to delivering the cyber readiness mission. Whether it be integrating solutions, driving operational processes or providing guidance back to NIS to further enhance our strategy, CISO pillar provide the engagement and personal touch to enable NIS to deliver maximum value to the customer, the PwC Network of firms.
 
 
 The CISO Services Team is made up of 4 core areas:
 
 
 <ul>
 <li>
 CISO Engagement
 </li>
 <li>
 NIS Service Interface
 </li>
 <li>
 CISO Measurement
 </li>
 <li>
 CISO Governance
 
 
 </li>
 </ul>
 Each of these areas work together to successfully support member firm Information Security Officers (ISOs) and their staffs in the implementation of the PwC Information Security Policy (ISP).
 
 
 
 Core Skills Within The CISO Services Team Consist Of
 
 
 
 <ul>
 <li>
 Conduct analysis of member firm needs in order to make appropriate decisions for the implementation of NIS global security strategy;
 </li>
 <li>
 Engage with member firm stakeholders to assess security threats/vulnerabilities and manage business risk;
 </li>
 <li>
 Facilitate member firm support from Security Architecture, Engineering, Innovation, and Transformation (SAEIT) and Cyber Security Service Management throughout the NIS service lifecycle;
 </li>
 <li>
 Assess service availability, adoption rates, and maturity to manage risk to business programs and processes;
 </li>
 <li>
 Govern member firms for compliance with PwC&rsquo;s Information Security Policy (ISP) and legal/regulatory frameworks; and
 </li>
 <li>
 Engage with Global IT and Applications to review security controls against ISP.
 
 
 </li>
 </ul>
 
 Strategic And Technical Orientation / Job Content
 
 
 
 Individuals selected for this role are expected to have both extensive knowledge and managerial know-how related to the following aspects of the CISO pillar skills matrix:
 
 
 <ul>
 <li>
 Experience managing multi-function relationships throughout major transformation;
 </li>
 <li>
 Understanding of security technology;
 </li>
 <li>
 Experience in a role balanced between business stakeholders and a central service organization;
 </li>
 <li>
 Navigating a multifaceted, matrix organization; and
 </li>
 <li>
 Collaborating with multiple stakeholders across functional and technical skillsets.
 
 
 </li>
 </ul>
 
 Range Of Impact
 
 
 
 <ul>
 <li>
 A 1E employee possesses knowledge in a specific subject matter area or technical domain related to the CISO Services function. 1E staff evaluate circumstances and, when appropriate, independently make recommendations to determine the best courses of action to execute strategy, and influence others through interactions with co-workers within the CISO Services team.
 </li>
 <li>
 Demonstrates some abilities in managing efforts within business engagement and relationship management space.
 </li>
 <li>
 Contribute positively to a working environment by building solid relationships with team members.
 </li>
 <li>
 Build and maintain relationships across the network of firms to effectively deliver security activities on behalf of NIS
 </li>
 <li>
 Executes tasks aligned to CISO pillar with autonomy.
 
 
 </li>
 </ul>
 
 Responsibilities
 
 
 
 
 Job Objectives and Key Metrics:
 
 
 
 <ul>
 <li>
 Manage relationships across PwC member firms
 </li>
 <li>
 Map existing member firm services to NIS service catalogue
 </li>
 <li>
 Define roadmap for integration of member firm services into NIS shared services
 </li>
 <li>
 Provide consultancy throughout service integration
 
 
 </li>
 </ul>
 
 Metrics
 
 
 
 <ul>
 <li>
 Capture metrics aligned to service integration and service adoption
 </li>
 <li>
 Drive quality of service to our stakeholders
 
 
 </li>
 </ul>
 
 Education Level
 
 
 
 Required: High school diploma or G.E.D.
 
 
 Preferred: Undergraduate Degree (e.g., BA, BS) in Information technology or field of study applicable to the role and/or completed certifications involving cybersecurity
 
 
 
 Experience Level
 
 
 
 1 - 3 Years&rsquo; of progressive professional roles involving information security, IT management and/or major program management.
 
 
 
 Other Details
 
 
 
 An effective CISO pillar candidate will also possess the following skills:
 
 
 <ul>
 <li>
 Analytical: Inquisitive nature and intuition regarding what questions to ask, when, and their relative significance.
 </li>
 <li>
 Technical: Broad understanding of security technology.
 </li>
 <li>
 Business: High level understanding of PwC&rsquo;s business model, service offerings, and business operating environment as it pertains to the firm&rsquo;s threat landscape. Ability to frame threats and exposures in a business context recognized by
 
 
 </li>
 </ul>
 non-technical staff and executives.
 
 
 <ul>
 <li>
 Domain landscape: Knowledge of assurance and technical security principles
 </li>
 <li>
 Communication: Ability to leverage business communication skills to inform, persuade, and teach stakeholders across a global network of member firms&rsquo; staff and leadership to enable effective information security activities and processes
 
 
 </li>
 </ul>
 in line with the cyber readiness program
 
 
 
 Education
 
 
 (if blank, degree and/or field of study not specified)
 
 
 
 Degrees/Field of Study required:Degrees/Field of Study preferred:
 
 
 
 Certifications
 
 
 (if blank, certifications not specified)
 
 
 
 
 Required Skills
 
 
 
 
 Optional Skills
 
 
 
 Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Azure Data Factory, Communication, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Managed Services, Optimism, Privacy Compliance, Regulatory Response, Security Architecture, Security Compliance Management, Security Control, Security Incident Management, Security Monitoring {+ 3 more}
 
 
 
 Desired Languages
 
 
 (If blank, desired languages not specified)
 
 
 
 
 Travel Requirements
 
 
 
 0%
 
 
 
 Available for Work Visa Sponsorship?
 
 
 
 Yes
 
 
 
 Government Clearance Required?
 
 
 
 Yes
 
 
 
 Job Posting End Date
 
</div>

Risk & Quality - Information Security Analyst- Associate - UAE

ServiceNow

<div>Company Description 
It all started in sunny San Diego, California in 2004 when a visionary engineer, Fred Luddy, saw the potential to transform how we work. Fast forward to today &mdash; ServiceNow stands as a global market leader, bringing innovative AI-enhanced technology to over 8,100 customers, including 85% of the Fortune 500&reg;. Our intelligent cloud-based platform seamlessly connects people, systems, and processes to empower organizations to find smarter, faster, and better ways to work. But this is just the beginning of our journey. Join us as we pursue our purpose to make the world work better for everyone. 
Job Description 
About The ServiceNow Security Office
The ServiceNow Security Organization is dedicated to delivering world-class, innovative security solutions that minimize risk and protect both our company and our customers. By enabling the secure migration of sensitive data and workloads to the cloud, we help accelerate ServiceNow&rsquo;s position as the most trusted SaaS provider in the industry.
We are committed to fostering an environment where our employees feel empowered, take pride in their work, and have the opportunity to make a meaningful impact.
About the Team &ndash; Global Security Support Center (GSSC)
The Global Security Support Center (GSSC) at ServiceNow is a diverse and highly skilled team of security professionals who play a pivotal role in strengthening both our internal and external security posture. The team collaborates closely with various functions across the company and serves as a key interface with our customers on security-related matters.
Through expertise, communication, and a commitment to excellence, the GSSC reinforces ServiceNow&rsquo;s reputation as a security-first organization, consistently demonstrating our commitment to protecting our platform, our data, and our customers.
What you get to do in this role:<ul><li>
Own, triage, investigate and respond to security matters of ServiceNow platform, ensuring timely communication, resolution and enhance customer experience and processes.</li><li>
Act as the primary point of contact for all security-related matters in ServiceNow, supporting both internal and external stakeholders.</li><li>
Facilitate the efficient workflow/triage of security-related incidents/cases by collaborating with customers and other internal ServiceNow teams.</li><li>
Build and maintain a high level of customer trust and confidence through exceptional service and communication.</li><li>
Understand and deliver excellent capability maturity models to fine tune Security processes.</li><li>
Create and enhance documentation and processes to strengthen security maturity and operational excellence.</li><li>
Develop and deliver training/enablement programs on Security, for internal and external customers on security awareness and best practices.</li><li>
Develop AI Solutions for automating repetitive activities &amp; design new solutions leveraging AI.</li><li>
Work with Legal on security/privacy-related matters &amp; a global team spread across different time zones, so flexibility of times is required.</li><li>
Provide support and be available as a responsible resource for the On-Call rotation (weekends, public holidays and after hours) as required.</li></ul> 

Qualifications 
To be successful in this role you have:<ul><li>
Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI's potential impact on the function or industry.</li><li>
A minimum 4 years of professional experience in information security or application security roles.</li><li>
Relevant certifications are highly preferred, including but not limited to:<ul><li>
Required: ServiceNow Certified System Administrator (CSA)</li><li>
Preferred (Two or more): Azure AI Fundamentals, AWS Certified AI Practitioner, Offensive Security Web Assessor (OSWA), GIAC Web Application Penetration Tester (GWAPT), GIAC Security Essentials Certification (GSEC), GIAC Certified Incident Handler (GCIH), CISSP, CISM.</li></ul></li><li>
Skills &amp; Competencies<ul><li>
Technical Skills:<ul><li>
Solid understanding of cloud computing models and major hyperscaler cloud models.</li><li>
Hands-on experience with using and understanding security tools and technologies, including: SIEM solutions, logging tools, load balancers, firewalls, WAFs, IDS/IPS, vulnerability management platforms, encryption techniques etc.</li><li>
Basic to Intermediate-level programming knowledge in Java/JavaScript and Python, with the ability to read, interpret &amp; understand to explain code effectively.</li><li>
Intermediate to Advanced proficiency in using web proxy tools for security testing and assessments.</li><li>
Good understanding and experience of implementing Cybersecurity capability maturity models and processes.</li></ul></li><li>
Application Security: In-depth understanding of web application vulnerabilities (e.g., OWASP Top Ten) and corresponding mitigation strategies.</li><li>
Risk Management: Ability to clearly explain security risks to non-technical stakeholders using straightforward, non-technical language.</li><li>
Compliance &amp; Regulatory Knowledge: Good knowledge of key compliance and regulatory frameworks, including: MeitY guidelines, DDPD Act, RBI Cybersecurity Framework, CERT-In guidelines, GDPR, HIPAA, ASD Essential 8, PCI DSS, ISO standards etc.</li><li>
Artificial Intelligence: Experience working with AI technologies and designing AI-based solutions.</li><li>
Analytical Thinking: Strong analytical and problem-solving capabilities, with the ability to evaluate and address complex security challenges.</li><li>
Communication: Excellent verbal and written communication skills, with the ability to convey technical information to non-technical audience.</li><li>
Team Collaboration: Demonstrated ability to thrive in a team-oriented, collaborative environment working in a follow the sun model.</li><li>
Security Concepts: Good understanding of Security concepts and articulating Security and risk in simple terms without using jargons and make sense to customers.</li></ul></li><li>
Bachelor&rsquo;s degree in computer science or information security or relevant information security</li><li>
Hands-on experience with web-based vulnerability exploitation and experience with cybersecurity capability maturity models is a strong plus to succeed in this role.</li></ul> 
FD21 
Additional Information 
Work Personas
We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.
Equal Opportunity Employer
ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.
Accommodations
We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact globaltalentss@servicenow.com for assistance.
Export Control Regulations
For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.
From Fortune. &copy;2025 Fortune Media IP Limited. All rights reserved. Used under license.</div>

Information Security Analyst, Global Security Support Center (GSSC)

Search 10000+ Information security analyst jobs near you this September. New roles added regularly across leading industries. Apply today.

10000 information security analyst jobs NEAR_ME

Information Security Analyst

Information Security Analyst, AVP

Information Security Analyst

Sr. Information Security Analyst

Senior Information Security Analyst

Risk & Quality - Information Security Analyst- Associate - UAE

Information Security Analyst, Global Security Support Center (GSSC)