Information Security Analyst

Job Description

• Excellent knowledge about NIST cyber security framework, ISO27001security domains, processes and controls.
• Certifications are preferred but not mandatory - CTPRP (Certified Third Party Risk Professional)/CISA/ CISM/CISSP/ ISO 27001 Lead Auditor/CRISC.
• Location is Gurgaon/Noida (Hybrid work twice a week from the office).

Experience

• Minimum 2 years Specialist-Level 7/ Preferred 1 year experience but not mandatory with relevant experience/ exposure in Information security/NIST cyber security framework / ISO 27001 processes and controls, infrastructure protection and information technology audit experience.
• Basic knowledge and understanding about multi-platforms e.g. Experience in UNIX, Windows and IP intranet/Internet security environments including firewalls, intrusion detection, incident response, policy writing, vulnerability testing, operating system hardening, regulatory compliance, and data classification.
• Knowledge of corporate security and network policies and procedures, and experience in a compliance management leadership role.
• Demonstrated competency in developing effective solutions to diverse and complex business problems.
• Exposure linking legal and regulatory statutes with corporate policies.

Knowledge

• Basic understanding of NIST cyber security framework, ISO 27002 and PCI DSS Standards.
• Basic knowledge of regulatory requirements such as Sarbanes Oxley, HIPPA, GLBA etc.

Skills

• Strong partnering, communication and presentation skills.
• Cross-Cultural Competence.
• Professionally well spoken and written English is required. Knowledge about any additional languages like Chinese, Korean, Japanese, Spanish will be an added advantage.
• Team work. Demonstrated ability to work effectively within a team environment.
• Strong analytical and problem-solving skills.
• Business Acumen and Customer Focus.
• Ability to successfully prioritize and multi-task comfortable with change and complexity.
• Demonstrated ability to deliver high quality, accurate work within tight deadlines.
• Demonstrated ability to handle confidential information in an appropriate manner.