Information Security Analyst

Experience & Work Details
Job Title: Information Security Analyst Experience: 3 5 years Location: Mohan Estate, Delhi, India (Work from Office) Working Days/Hours: Monday Friday, 8:00 AM 5:00 PM Employment Type: Full-time About The Role We are looking for a detail-oriented and proactive Information Security Analyst to join our team The ideal candidate will play a critical role in safeguarding organizational data, ensuring compliance with industry standards, and supporting ongoing risk management initiatives, Key Responsibilities Support ISO 27001 and SOC 2 Type II compliance, including audits and evidence collection, Conduct risk assessments, vulnerability scans, and security audits, Develop, implement, and monitor security policies and procedures, Manage vendor risk assessments and ensure data protection compliance, Draft and maintain security documentation (policies, agreements, terms of use), Collaborate with teams to embed Privacy by Design/Default in systems and processes, Recommend and implement risk mitigation measures, Qualifications & Skills Bachelors degree in Information Security, Computer Science, or a related field, 3-5 years of proven experience in information security, compliance, or risk management, Knowledge of ISO 27001, GDPR, and data protection best practices, Experience with vulnerability assessment tools, risk analysis frameworks, and incident response, Strong analytical and documentation skills, Ability to work effectively in a fast-paced, office-based environment, Preferred Certifications (Having Them is a Plus) ISO 27001 Lead Implementer/Auditor CompTIA Security+, CISA, CISM, or equivalent Any other certification demonstrating job-related skills in information security, risk management, or compliance Additional Skills/Experience Cloud Security: AWS, Azure, or GCP controls, Security Operations: SIEM tools (Splunk, ELK, QRadar), incident response, Compliance: Exposure to HIPAA, PCI-DSS, NIST, or ISO 27701, Testing: Penetration testing & threat modeling, Tools: DLP and endpoint protection, Soft Skills: Strong communication; ability to explain risks in business terms,