information security analyst

Road and Transport, RTA Dubai

<br>Job Title<br>Information Security Analyst - Roads and Transport Authority Dubai<br>Job Description<br>Information Security Analyst - Roads and Transport Authority Dubai<br> <br>Job Location: Dubai, United Arab Emirates<br>Industry: Government Administration<br>Function: Cyber security<br>Gender: Any<br>Candidate Nationality: All Nationalities (Priority for UAE Nationals)<br>Job Type: Full-time<br> <br>Position Overview<br>The Roads and Transport Authority (RTA) in Dubai is hiring an experienced Information Security Analyst to strengthen its cybersecurity framework. This role focuses on implementing security measures, ensuring compliance with international standards, and protecting critical information assets within the organization.<br> <br>What You ll Do<br> <br>* Identify, recommend, and implement corrective actions in response to security violations<br>* Conduct vulnerability research and recommend remediation plans<br>* Analyze and test security controls for compliance with ISO27001, ISR, and other regulations<br>* Perform security assessments to identify vulnerabilities in systems and applications<br>* Monitor, analyze, and escalate security events from incident response queues<br>* Create and maintain IT security standard operating procedures and configuration reports<br>* Conduct technical analysis of malware, intrusion attempts, and system logs<br>* Provide guidance on authentication and access systems aligned with security architecture requirements<br>* Develop and maintain security policies, standards, and procedures to protect information assets<br>* Support IT security awareness programs and assist with staff training initiatives<br>* Perform continuous risk assessments and ensure ongoing compliance with standards<br>* Collaborate with teams to ensure effective incident response and implement best practices<br> <br>Ideal Profile<br> <br>* Bachelor s degree in Computer Science, IT, or Business Administration from a recognized university<br>* Minimum of 3 years of relevant experience in IT security or related fields<br>* Preferred certifications: CISSP, CISM, CISA, GIAC<br>* Working knowledge of ISO27001, ISR, ethical hacking, and penetration testing<br>* Strong project management and analytical skills<br>* Excellent communication and interpersonal abilities<br>* Ability to adapt to multicultural environments and manage multiple priorities effectively<br><br>

Information Security Analyst

Cepheid

<div><p>At Cepheid, we are passionate about improving health care through fast, accurate diagnostic testing. Our mission drives us, every moment of every day, as we develop scalable, groundbreaking solutions to solve the world&rsquo;s most complex health challenges. Our associates are involved in every stage of molecular diagnostics, from ideation to development and delivery of testing advancements that improve patient outcomes across a range of settings. As a member of our team, you can make an immediate, measurable impact on a global scale, within an environment that fosters career growth and development.</p><p></p><p>
Cepheid is proud to work alongside a community of six fellow Danaher Diagnostics companies. Together, we&rsquo;re working at the pace of change on diagnostic tools that address the world&rsquo;s biggest health challenges, driven by knowing that behind every test there is a patient waiting.</p><p>
Learn about the Danaher Business System which makes everything possible.</p><p><br>
This position is part of the Information Security/IT department and can be an onsite role based in Bangalore (IDC), India. As part of a critical process within Information Security, our vision is to help Cepheid leadership, identify, mitigate, and manage information security risks in a methodical manner.</p><p></p><p><b>
In this role, you will have the opportunity to:</b></p><p></p><p>
As a member of the Information Security team, the primary responsibility of the Information Security Analyst is to lead, coordinate, and drive the implementation of key information security technologies, processes, and projects. This involves collaboration with Information Security, IT, and regional business teams. The individual must ensure that services are delivered with high quality and punctuality through both personal contributions and strong communication regarding security risks.</p><p></p><ul><li>
Support the protection of the organization's digital assets by identifying vulnerabilities, detecting and responding to threats, and designing and implementing security strategies.</li><li>
Responsibilities include monitoring networks for suspicious activity, performing risk assessments, creating and following incident response plans, educating staff on security protocols, and staying current with the latest cybersecurity trends to guard against malware, phishing, and other cyberattacks.</li><li>
Work in collaboration with parent company stakeholders to understand and implement information security program methodologies and solutions to effectively manage expectations and communicate program updates to stakeholders.</li><li>
Maintain a constant focus on security threats and methodologies that reduce and mitigate cyber-risks using industry-based processes, tools, and metrics by performing posture reviews and data protection evaluations.</li><li>
Demonstrate Best Team Wins by willing to supporting security/IT teams with key projects and operational activities as needed continuously look for areas for improvement and facilitating lessons learned for future projects and engagements.</li></ul><p></p><p><b>
The essential requirements of the job include:</b></p><ul><li>
Bachelor&rsquo;s degree in business information systems or equivalent.</li><li>
Ideally 6-10 years of IT security and related experience, preferably in a multi-national firm. The ability to analyze data and security metrics to identify threats and vulnerabilities. Effective at diagnosing and fixing security problems and responding to incidents.</li><li>
Self-motivated, goal-oriented, strong self-accountability, and results-driven in alignment with organizational goals.</li><li>
Deep understanding of network protocols, operating systems, firewalls, and other security software. Experience with various information security technologies, (e.g., AWS &amp; Azure cloud technologies, networking technologies, security tools, business applications and architectural assessment methodologies)</li><li>
Experience with information security processes, information security policies and standards, risk assessments, data classification processes, and industry standard implementation methodologies.</li></ul><p></p><p><b>
It would be a plus if you also possess previous experience in:</b></p><ul><li>
Solid sense of personal accountability regarding decision-making and managing strong relationships in a cross-matrix environment to achieve objectives.</li><li>
Good communication skills and ability to efficiently elaborate issues and risks to all partners and senior management.</li><li>
Experience working in a highly collaborative environment and promoting a collaboration-mentality to develop, deliver, operationalize, document, and support solutions.</li></ul><p></p><p>
Cepheid, a Danaher company, offers a broad array of comprehensive, competitive benefit programs that add value to our lives. Whether it is a health care program or paid time off, our programs contribute to life beyond the job. Check out our benefits at danaherbenefitsinfo.com.</p><p>
When you join us, you will also be joining Danaher&rsquo;s global organization, where 69,000 people wake up every day determined to help our customers win. As an associate, you will try new things, work hard, and advance your skills with guidance from dedicated leaders, all with the support of powerful Danaher Business System tools and the stability of a tested organization.</p><p></p><p>
Danaher is committed to a diverse and inclusive culture where everyone feels they belong, and all voices are heard. We believe in our associates and the unique perspectives they bring to every challenge, which is why we will empower you to push the boundaries of what is possible.</p><p>
If you have ever wondered what is within you, there is no better time to find out.</p><p>
Join our winning team today. Together, we&rsquo;ll accelerate the real-life impact of tomorrow&rsquo;s science and technology. We partner with customers across the globe to help them solve their most complex challenges, architecting solutions that bring the power of science to life.</p><p></p><p>
For more information, visit www.danaher.com.</p></div>

Granicus India

<div>The Company:
<div><b>
Serving the People Who Serve the People</b></div><div></div><div><br>
Granicus is driven by the excitement of building, implementing, and maintaining technology that is transforming the Govtech industry by bringing governments and its constituents together. We are on a mission to support our customers with meeting the needs of their communities and implementing our technology in ways that are equitable and inclusive. Granicus has consistently appeared on the GovTech 100 list over the past 5 years and has been recognized as the best companies to work on BuiltIn.</div><div></div><div><br>
Over the last 25 years, we have served 5,500 federal, state, and local government agencies and more than 300 million citizen subscribers power an unmatched Subscriber Network that use our digital solutions to make the world a better place. With comprehensive cloud-based solutions for communications, government website design, meeting and agenda management software, records management, and digital services, Granicus empowers stronger relationships between government and residents across the U.S., U.K., Australia, New Zealand, and Canada. By simplifying interactions with residents, while disseminating critical information, Granicus brings governments closer to the people they serve&mdash;driving meaningful change for communities around the globe.</div><div><br>
Want to know more? See more of what we do here.</div>
Job Summary:
<div>
We are looking for an experienced Senior Information Security Analyst to join the Information Security and Compliance team. The team manages internal and external audits, policies and procedures, control investigations to test effectiveness and identify efficiencies, and third-party risk management. We also provide support with RFPs, RFIs, other customer security questions, and customer security discussions. This role will report to the Manager of Information Security and Compliance.</div><div></div><div><br>
In this role, you will lead audits, technical control investigations, and continuous development of security collateral &ndash; security answer library, audit runbooks, and other resources. You will need strong written and verbal communication, as this role will work with technical and non-technical teams, customers, and auditors. You should have experience with multiple audit frameworks, such as ISO 27001, SOC 2, PCI, or NIST 800-53 (e.g., FedRAMP, FISMA, CJIS), You should have a strong understanding of technical control implementation, as you will partner as an SME for cross-functional teams, supporting their understanding of the compliance requirements, control efficiencies, and auditability. We partner with Cloud Operations, Engineering, Corp IT and other teams to provide security guidance or recommendations, such as with vulnerability management, patching, system hardening, change control, and audit logging, alerts, &amp; monitoring.
</div>What Your Impact Will Look Like:
<ul><li>Lead external compliance audits and attestations, including for FedRAMP, TxRAMP, ISO 27001, SOC 2, HIPAA, FISMA, CJIS, PCI, and Cyber Essentials. This includes internal audit preparation, evidence review and submission, coordinating audit schedules, and managing audit deliverables.
</li><li>Centralize and manage audit runbooks, including evidence runbooks. Build audit runbooks.
</li><li>Track audit findings and resolution.</li><li>
Lead audit retrospections to identify improvement opportunities, address challenges, and highlight success points.
</li><li>Identify and communicate control gaps or improvement opportunities, provide analysis of compliance requirements, evaluate remediation plans, and track through resolution.
</li><li>Build and maintain relationships with external auditors and control owners.</li><li>
Provide guidance to control owners. Work with control owners to identify opportunities to improve control implementation and scalability.
</li><li>Partner with product teams and control owners; provide guidance on compliance requirements for planned changes.</li><li>
Participate in change control review meetings to provide Security feedback and decisions.
</li><li>Manage security projects geared towards improvement of the ISMS, compliance audits, and security resources for internal stakeholders.
</li><li>Assist as security SME for support request escalations.</li><li>
Respond to customer questions, including to provide customer-facing responses and maintain a security answer library.
</li><li>Review and update security training content at least annually.
</li><li>Perform third party security reviews, including for new procurement, recurring reviews, and internal system management reviews.</li></ul>
You Will Love This Job If You Have:
<div><b>
Knowledge/Skills/Abilities</b></div><ul><li>
Direct experience leading third party cloud security audits, such as ISO 27001, SOC 2 Type II, FedRAMP, StateRAMP, TxRAMP</li><li>
Knowledge of common security frameworks, such as NIST 800-53, ISO 27001, PCI, HIPAA, SOC 2, Cyber Essentials</li><li>
Understand nuances between different audit frameworks in order to educate and support internal control owners, prepare for audits, and manage the audit process</li><li>
Experience documenting company security policies and procedures</li><li>
Strong communication skills, written and verbal</li><li>
Program management experience for multiple compliance frameworks</li><li>
Experience working with a robust product set, including software and cloud services</li><li>
Ability to work with technical teams and non-technical teams</li><li>
Familiarity with AWS, Azure, and/or GCP cloud security and infrastructure</li></ul><div><b>
Experience/Credentials:</b></div><ul><li>
7+ years in information security and compliance
</li><li>Relevant security certifications are a plus, such as CISSP, CISM, CISA, CRISC, or equivalent.
</li></ul>About Us:
<div>
Don&rsquo;t have all the skills/experience mentioned above? At Granicus, we are trying to build diverse, inclusive teams. We do not have degree requirements for most of our roles. If you don&rsquo;t meet every requirement above but are excited to learn more, we encourage you to apply. We might just be able to find another role that could be a perfect fit!</div><div></div><div><b><br>
Security and Privacy Requirements</b></div><ul><li>
Responsible for Granicus information security by appropriately preserving the Confidentiality, Integrity, and Availability (CIA) of Granicus information assets in accordance with the company's information security program.</li><li>
Responsible for ensuring the data privacy of our employees and customers, their data, as well as taking all required privacy training in a timely manner, in accordance with company policies.</li></ul><div></div><div><b><br>
The Team</b></div><ul><li>
We are a remote-first company with a globally distributed workforce across the United States, Canada, United Kingdom, India, Armenia, Australia, and New Zealand.</li></ul><div></div><div><b><br>
The Culture</b></div><ul><li>
At Granicus, we are building a transparent, inclusive, and safe space for everyone who wants to be<br>
a part of our journey.</li><li>
A few culture highlights include &ndash; Employee Resource Groups to encourage diverse voices</li><li>
Coffee with Mark sessions &ndash; Our employees get to interact with our CEO on very important and<br>
sometimes difficult issues ranging from mental health to work-life balance and current affairs.</li><li>
Microsoft Teams communities focused on wellness, art, furbabies, family, parenting, and more.</li><li>
We bring in special guests from time to time to discuss issues that impact our employee<br>
population</li></ul><div><b><br>
The Impact</b></div><ul><li>
We are proud to serve dynamic organizations around the globe that use our digital solutions to make the world a better place &mdash; quite literally. We have so many powerful success stories that illustrate how our solutions are impacting the world. See more of our impact here.</li></ul>
The Benefits: At Granicus, we offer a <b>comprehensive and flexible benefits package</b> designed to support your well-being, growth, and work-life balance.<br>
<br>
Here&rsquo;s what you can expect as a India-based team member:<p>
<b>
Flexibility &amp; Balance</b>
</p><ul><li><b>
Paid Time Off&ndash;</b> Take the time you need to rest, recharge, and live your life.
</li><li><b>Company-Wide Wellbeing Days &ndash;</b> Paid days off to unplug and focus on your mental health.
</li><li><b>Work From Home Reimbursement &ndash;</b> Support a productive home office environment.</li></ul>
<b>Health &amp; Wellness</b>
<ul><li><b>Private healthcare benefits -</b> Comprehensive coverage for you and your family.
</li><li><b>On-Demand Mental Health Support &ndash;</b> Access to Headspace and other wellness tools.
</li><li><b>Fitness Reimbursement &amp; Cycle Program &ndash;</b> Stay active, your way.
</li><li><b>Critical Illness and Life Insurance Benefits</b></li></ul>
<b>Family &amp; Future</b>
<ul><li><b>Paid Parental Leave -</b> For both birthing and non-birthing parents.
</li><li><b>Pension plan with employer contributions</b></li></ul>
<b>Growth &amp; Recognition</b>
<ul><li><b>Online Learning Platforms &ndash;</b> Fuel your professional development.
</li><li><b>Competitive Salary &amp; Bonuses &ndash;</b> Your contributions are valued and rewarded.</li></ul></div>

Senior Information Security Analyst

Quantiphi

<div><div>While technology is the heart of our business, a global and diverse culture is the heart of our success. We love our people and we take pride in catering them to a culture built on transparency, diversity, integrity, learning and growth.<br>
<br>
If working in an environment that encourages you to innovate and excel, not just in professional but personal life, interests you- you would enjoy your career with Quantiphi!</div><div>
Job Description:</div><div></div><div>
Skills Required :Privacy impact assessments, Risk assessment, Data Privacy, Data Protection</div><div>
Location :Mumbai</div><div>
Education/Qualification : BE or B.Tech</div><div>
Desirable Skills : CIPP-E, CIPT, Governance, Risk, Monitoring Tools, Monitoring, privacy</div><div>
Years Of Exp :0.5 to 2 years</div><ul><li><div>
Establishes, defines, and reports privacy KPIs via scorecard and drive performance in partnership with business, Global Privacy team.</div></li><li><div>
Align Quantiphi privacy monitoring program with the global privacy program monitoring framework.</div></li><li><div>
Conduct Data Privacy Impact Assessments and Privacy by Design Assessments.</div></li><li><div>
Support in relevant data privacy related documentation including records of processing activities (ROPA), data flow diagrams (DFD), data processing agreements etc.</div></li><li><div>
Creation of test strategies to verify controls and confirm compliance with applicable privacy laws.</div></li><li><div>
Updates DPO on program progress, gaps, and strategies. Identify key controls for review topics and areas of improvement in local practices related to data privacy and have a working knowledge of global privacy laws.</div></li><li><div>
Work with multi-disciplinary teams and collaborate with business, subject matter experts and delivery teams to develop strategic business solutions.</div></li><li><div>
Support and guide the data team to employ methods of statistical disclosure controls to mitigate the privacy risks associated with the public disclosure of development data.</div></li><li><div>
Be the functional point of contact between development and business teams and document specifications for requirements and oversee privacy by design and default.</div></li><li><div>
Collaborate with different stakeholders to perform regular privacy assessments of data, operational processes; and to identify and mitigate risks through effective tools, training and guidance.</div></li><li><div>
Should be able to appropriately monitor, audit, and compliance.</div></li><li><div>
Evaluate/test different privacy-preserving techniques for operational effectiveness differential privacy, data de-identification, privacy statistical properties of data sets (k-anonymity, l-diversity), etc. and act as a monitoring and testing administrator.</div></li><li><div>
Research, build and maintain tooling for testing and continuous monitoring of privacy controls across multiple cloud platforms including AWS, Google etc.</div></li><li><div>
Work in collaboration with Data Architect and provide required business/functional inputs that helps to embedded privacy by design.</div></li></ul><div></div><div>
Qualifications and Experience:</div><div></div><ul><li><div>
Bachelor's degree in law, or information technology with a minimum 6month to 2 years&rsquo; experience working AI-ML/Technology/Product/ IT organization sector in large organizations.</div></li><li><div>
Working knowledge of industry standard risk, governance and security standard methodologies</div></li><li><div>
Experience in risk assessments/privacy impact assessments(PIAs), testing and monitoring controls</div></li><li><div>
Process &amp; Technical understanding of privacy best practices and challenges with coding ability</div></li><li><div>
Knowledge of ISO27701 (PIMS), ISO27001 (ISMS), SOC and PCI DSS standards.</div></li><li><div>
Knowledge of data protection and privacy laws of India, and other international laws such as EU GDPR, North America would be preferred.</div></li><li><div>
Experience in data protection &amp; data security measures (encryption, anonymization etc.)</div></li><li><div>
Professional credentials such as CISA, CISSP</div></li><li><div>
Ability to work cross-functionally, build strong relationships and partner effectively with others to address issues</div></li><li><div>
Strong organizational and time management skills</div></li><li><div>
Ability to manage competing priorities in a fast-paced environment</div></li><li><div>
Self-starter and able to work independently with minimal supervision</div></li><li><div>
Experience to operate within an international environment with a diversity of cultures</div></li><li><div>
Fluent in English, both verbally and in writing</div></li></ul><div></div><div><div><div><div><div><div><div><div><i>
If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us</i><i>!</i></div></div></div></div></div></div></div></div></div><div></div>

QatarEnergy

<div>
 <strong>
  Primary Purpose Of The Job
  <br/>
  <br/>
 </strong>
 Governance and execution of the Information Security Management System (ISMS) including developing
 <br/>
 <br/>
 policies,standards and procedures required for the corporate information security in both an Information
 <br/>
 <br/>
 technology (IT) and Operational Technology (OT) capacity.
 <br/>
 <br/>
 Define required information security policies, standards and procedures related to their areas of operation as well as
 <br/>
 <br/>
 raising awareness of those polices, standards and procedures.
 <br/>
 <br/>
 Ensure adequate an effective IT controls exist to meet applicable current and future security compliance requirements.
 <br/>
 <br/>
 Conduct compliance and operational maturity assessments to ensure optimal operation of the information and
 <br/>
 <br/>
 operational technology environments under the guidelines of the ISMS.
 <br/>
 <br/>
 Develop reporting Metrics, dashboards and evidences of compliance activities.
 <br/>
 <br/>
 Coordinate with IT stakeholders, project managers, and business owners to facilitate vendor risk assessments, due
 <br/>
 <br/>
 diligence review and security requirements definition. Maintain third-party assessment documentation.
 <br/>
 <br/>
 Stay updated on the latest security trends, emerging threats and best practices to continuously improve the overall
 <br/>
 <br/>
 security posture.
 <br/>
 <br/>
 Coordinate and align activities between Information Security and Business Continuity, and liaise within IT Department
 <br/>
 <br/>
 to ensure business continuity and disaster recovery plans are in place, tested, and report regularly.
 <br/>
 <br/>
 Carry out other Security related activities as assigned by team Lead.
 <br/>
 <br/>
 <strong>
  Required Experience And Skills
  <br/>
  <br/>
 </strong>
 10+ years of relevant professional experience.
 <br/>
 <br/>
 <ul>
  <li>
   Experience with large ICS &amp; ICT environments in the Energy sector, preferably in Oil &amp; Gas.
  </li>
  <li>
   Experience with and understanding of customized information security management systems.
  </li>
  <li>
   Experience in defining Governance, Risk, and Compliance (GRC) processes and leveraging industry-standard GRC
   <br/>
   <br/>
  </li>
 </ul>
 tools and products.
 <br/>
 <br/>
 <ul>
  <li>
   Knowledge of information security capabilities and requirements analysis.
  </li>
  <li>
   Knowledge of relevant state laws, industry regulations, and security standards.
  </li>
  <li>
   Excellent written, verbal and presentation communication skills.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Educational Qualifications
  <br/>
  <br/>
 </strong>
 Bachelor degree in information security, computer science, or engineering.
 <br/>
 <br/>
 <ul>
  <li>
   Professional certifications in information security management and standards compliance (e.g., CISSP, CISM,
   <br/>
   <br/>
  </li>
 </ul>
 CRISC, GIAC, ISO27001, etc.) and experience with control frameworks (e.g., NIST Cybersecurity Control Framework).
</div>


SR. INFORMATION SECURITY ANALYST

Aditya Birla Group

<div>
 <p>
  <strong>
   Job Description &ndash; Information Security Analyst (Defensive Security)
  </strong>
 </p>
 <p>
  <strong>
   Location:
  </strong>
  Thane, Maharashtra, India (On-site)
 </p>
 <p>
  <strong>
   Employment Type:
  </strong>
  Third-Party Payroll
 </p>
 <p>
  <strong>
   Location - Thane
  </strong>
 </p>
 <p>
  <strong>
   Client- Aditya Birla Group
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job Description &ndash; Senior Information Security Analyst (SOC Function)
  </strong>
 </p>
 <p>
  <strong>
   Role Overview
  </strong>
 </p>
 <p>
  We are seeking a
  <strong>
   Senior Information Security Analyst
  </strong>
  to join our SOC function, responsible for defending enterprise systems against cyber threats. The candidate will handle
  <strong>
   end-to-end security operations, governance, and incident management
  </strong>
  while working across technologies in
  <strong>
   Perimeter, Endpoint, Web, and Data Security
  </strong>
  .
 </p>
 <p>
  The role requires strong
  <strong>
   hands-on expertise
  </strong>
  in at least one of the following focus areas:
 </p>
 <ul>
  <li>
   <strong>
    Endpoint Security
   </strong>
   : CrowdStrike, Zscaler, Data Loss Prevention (DLP)
  </li>
  <li>
   <strong>
    Perimeter Security
   </strong>
   : Firewalls, IPS/IDS, DDoS protection
  </li>
 </ul>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <ul>
  <li>
   Monitor, analyze, and respond to security events within the SOC environment.
  </li>
  <li>
   Lead incident response and troubleshooting across perimeter, endpoint, web, and data security controls.
  </li>
  <li>
   Manage and tune endpoint security solutions (CrowdStrike, Zscaler, DLP).
  </li>
  <li>
   Administer and optimize perimeter defenses (Firewalls, IPS/IDS, DDoS mitigation).
  </li>
  <li>
   Perform vulnerability assessments and drive remediation in collaboration with IT teams.
  </li>
  <li>
   Ensure adherence to
   <strong>
    information security governance standards
   </strong>
   (ISO 27001, compliance audits, risk mitigation).
  </li>
  <li>
   Document incidents, root cause analyses, and prepare dashboards/reports for management.
  </li>
  <li>
   Act as a key technical point of contact for cross-functional stakeholders and vendors.
  </li>
 </ul>
 <p>
  <strong>
   Required Skills &amp; Competencies
  </strong>
 </p>
 <ul>
  <li>
   3&ndash;5 years of experience in
   <strong>
    Security Operations (SOC)
   </strong>
   or equivalent.
  </li>
  <li>
   Hands-on expertise in either:
  </li>
  <li>
   <strong>
    Endpoint Security
   </strong>
   (CrowdStrike, Zscaler, DLP), OR
  </li>
  <li>
   <strong>
    Perimeter Security
   </strong>
   (Firewalls, IPS/IDS, DDoS).
  </li>
  <li>
   Strong knowledge of incident response, network security concepts, and log analysis.
  </li>
  <li>
   Good understanding of SIEM tools, monitoring platforms, and threat detection techniques.
  </li>
  <li>
   Excellent analytical, troubleshooting, and documentation skills.
  </li>
  <li>
   Strong communication and collaboration skills for working in enterprise environments.
  </li>
 </ul>
 <p>
  <strong>
   Qualifications
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Computer Science, Information Technology, or related field.
  </li>
  <li>
   Security certifications preferred:
   <strong>
    CISSP, CISM, CEH, CCNA Security, or equivalent
   </strong>
   .
  </li>
 </ul>
 <p>
  <strong>
   Good to Have
  </strong>
 </p>
 <ul>
  <li>
   Exposure to
   <strong>
    cloud security
   </strong>
   (AWS/Azure security controls).
  </li>
  <li>
   Familiarity with
   <strong>
    data security solutions
   </strong>
   and
   <strong>
    web security platforms
   </strong>
   .
  </li>
  <li>
   Experience working with
   <strong>
    global SOC operations
   </strong>
   .
  </li>
 </ul>
 <p>
 </p>
</div>


Information Security Analyst- Urgent-Thane

Zones IT Solutions

<div>
 <strong>
  Description
  <br/>
  <br/>
 </strong>
 Company Overview:
 <br/>
 <br/>
 When it comes to IT solution providers, there are a lot of choices. But when it comes to providers with innovative and differentiating end-to-end service offerings, there&rsquo;s really only one: Zones &ndash; First Choice for IT.TM
 <br/>
 <br/>
 Zones is a Global Solution Provider of end-to-end IT solutions with an unmatched supply chain. Positioned to be the IT partner you need, Zones, a Minority Business Enterprise (MBE) in business for over 35 years, specializes in Digital Workplace, Cloud &amp; Data Center, Networking, Security, and Managed/Professional/Staffing services. Operating in more than 120 countries, leveraging a robust portfolio, and utilizing the highest certification levels from key partners, including Microsoft, Apple, Cisco, Lenovo, Adobe, and more, Zones has mastered the science of building digital infrastructures that change the way business does business ensuring whatever they need, they can Consider IT Done. Follow Zones, LLC on Twitter @Zones, and LinkedIn and Facebook.
 <br/>
 <br/>
 <strong>
  Position Overview
  <br/>
  <br/>
 </strong>
 As the Information Security Analyst - Compliance &amp; Risk Management, you will analyze management and technical controls to ensure compliance with security requirements. This includes mapping regulatory and security requirements across the information security framework and tracking enterprise compliance across multiple security frameworks. You will also assist internal teams in preparing for internal and external assessments and audits, collaborate on critical IT projects to address security policy and risk issues, and develop key performance metrics to track and ensure compliance with policies and standards.
 <br/>
 <br/>
 What you&rsquo;ll do as the Information Security Analyst &ndash; Compliance &amp; Risk Management:
 <br/>
 <br/>
 Employees employed in the role of Information Security Analyst &ndash; Compliance &amp; Risk Management shall be required to apply their independent minds and demonstrate intellectual abilities in their decision-making.
 <br/>
 <br/>
 The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
 <br/>
 <br/>
 <ul>
  <li>
   Analyze management and technical controls to ensure specific security and compliance requirements are met.
  </li>
  <li>
   Map regulatory/security requirements across the information security framework.
  </li>
  <li>
   Track enterprise compliance across multiple security frameworks including ISO27001, 27701, SOC2, GDPR, and PCI-DSS, maintaining up-to-date records of requirements and corresponding mitigating controls.
  </li>
  <li>
   Help internal teams with readiness for internal/external assessments/audits against industry standards and review programs/documentation for conformance.
  </li>
  <li>
   Collaborate on critical IT projects to ensure that security policy/risk issues are addressed throughout the project life cycle.
  </li>
  <li>
   Develop key performance metrics to track and ensure compliance with established policies and standards.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What You Will Bring To The Team
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   5-7 years of information security experience.
  </li>
  <li>
   Experience with ISO 27001, SOC 2, and PCI-DSS compliance.
  </li>
  <li>
   Strong communication skills (verbal and written).
  </li>
  <li>
   Ability to meet deadlines and work under pressure.
  </li>
  <li>
   Experience of working in US-based multinational organizations is a plus.
  </li>
  <li>
   Security certifications such as CISSP/CISA, ISO27001.
  </li>
  <li>
   Extensive experience with auditing vendors/service providers/partners for compliance with security.
  </li>
  <li>
   Experience of working extensively with the Engineering teams (system admin, network admin, security admin, application teams) to effectively communicate the compliance requirements
  </li>
  <li>
   Bachelor&rsquo;s degree in Computer Science or Information Technology.
   <br/>
   <br/>
  </li>
 </ul>
 Zones offers a comprehensive Benefits package
 <br/>
 <br/>
 At Zones, we are committed to fostering an inclusive and diverse workplace where every team member is valued and supported. We offer life insurance, optional health insurance, and retirement benefits in line with Company policy. Employees also enjoy additional perks such as the Voluntary Pension Scheme, EOBI, complimentary meals, and access to our in-house gym.
 <br/>
 <br/>
 We take pride in being an equal opportunity employer and remain dedicated to maintaining a workplace free from discrimination of any kind. If you are passionate about driving innovation in IT, sales, engineering, or operations, Zones provides a dynamic and collaborative environment to help you grow your career.
 <br/>
 <br/>
 All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or disability.
 <br/>
 <br/>
 Job timings: 08:00 PM to 05:00 AM (Pk time)
</div>


Information Security Analyst – Compliance & Risk Management

Search 10000+ Information security analyst jobs near you this November. New roles added regularly across leading industries. Apply today.

10000 information security analyst jobs NEAR_ME

Information Security Analyst

Information Security Analyst

Senior Information Security Analyst

Information Security Analyst

SR. INFORMATION SECURITY ANALYST

Information Security Analyst- Urgent-Thane

Information Security Analyst – Compliance & Risk Management