Information Security Analyst

Job Title: Information Security Analyst – Implementation Specialist
Experience: 2–3 Years
Location: Mohali
Reporting To: Information Security Manager / CISO

About the Role:

We are seeking an Information Security professional with 2–3 years of experience to expedite the implementation of security policies, compliance controls, and web application security measures in a testing and certification environment. The candidate will help ensure our labs, processes, and IT systems adhere to industry standards, regulatory requirements, and best practices such as OWASP Top 10.

Key Responsibilities:

• Implement and maintain information security policies, procedures, and controls aligned with ISO 27001 and other relevant standards.
• Conduct risk assessments and support remediation plans to ensure compliance with regulatory and client requirements.
• Ensure web applications, tools, and systems follow OWASP Top 10 security guidelines to mitigate common vulnerabilities.
• Coordinate with testing teams, labs, and IT to implement security controls without disrupting operations.
• Assist in internal and external audits related to information security and data protection.
• Support vulnerability management, access control, and security incident monitoring.
• Maintain documentation for security implementations, SOPs, and compliance reports.
• Provide guidance to teams on secure handling of sensitive data and regulatory compliance.
• Stay updated on regulatory changes, industry best practices, and emerging security threats.

Required Skills & Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or related field.
• 2–3 years of experience in information security, preferably in a regulated/testing/certification environment.
• Hands-on experience in implementing security policies, controls, and audits.
• Strong knowledge of web application security and experience implementing OWASP Top 10 recommendations.
• Familiarity with ISO 27001, ISO 9001, ISO 17025, NIST, GDPR, and other relevant standards.
• Understanding of IT systems, networks, cloud environments, and data protection principles.
• Strong documentation, analytical, and problem-solving skills.
• Certifications like ISO 27001 Lead Implementer, CISA, CISM, or CompTIA Security+ are a plus.

Desired Attributes:

• Proactive, detail-oriented, and able to expedite security implementations independently.
• Strong communication and coordination skills with cross-functional teams.
• Ability to work under pressure and meet strict deadlines in a compliance-focused environment.
• Passionate about information security, web application security, and regulatory compliance in testing and certification services.

Job Types: Full-time, Permanent

Pay: From ₹20,000.00 per month

Work Location: In person