Information Security Analyst

Skills Required :

Location :

Education/Qualification :

Desirable Skills :

Years Of Exp :

• Establishes, defines, and reports privacy KPIs via scorecard and drive performance in partnership with business, Global Privacy team.
• Align Quantiphi privacy monitoring program with the global privacy program monitoring framework.
• Conduct Data Privacy Impact Assessments and Privacy by Design Assessments.
• Support in relevant data privacy related documentation including records of processing activities (ROPA), data flow diagrams (DFD), data processing agreements etc.
• Creation of test strategies to verify controls and confirm compliance with applicable privacy laws.
• Updates DPO on program progress, gaps, and strategies. Identify key controls for review topics and areas of improvement in local practices related to data privacy and have a working knowledge of global privacy laws.
• Work with multi-disciplinary teams and collaborate with business, subject matter experts and delivery teams to develop strategic business solutions.
• Support and guide the data team to employ methods of statistical disclosure controls to mitigate the privacy risks associated with the public disclosure of development data.
• Be the functional point of contact between development and business teams and document specifications for requirements and oversee privacy by design and default.
• Collaborate with different stakeholders to perform regular privacy assessments of data, operational processes; and to identify and mitigate risks through effective tools, training and guidance.
• Should be able to appropriately monitor, audit, and compliance.
• Evaluate/test different privacy-preserving techniques for operational effectiveness differential privacy, data de-identification, privacy statistical properties of data sets (k-anonymity, l-diversity), etc. and act as a monitoring and testing administrator.
• Research, build and maintain tooling for testing and continuous monitoring of privacy controls across multiple cloud platforms including AWS, Google etc.
• Work in collaboration with Data Architect and provide required business/functional inputs that helps to embedded privacy by design.
  

Qualifications And Experience

• Bachelor's degree in law, or information technology with a minimum 6month to 2 years’ experience working AI-ML/Technology/Product/ IT organization sector in large organizations.
• Working knowledge of industry standard risk, governance and security standard methodologies
• Experience in risk assessments/privacy impact assessments(PIAs), testing and monitoring controls
• Process & Technical understanding of privacy best practices and challenges with coding ability
• Knowledge of ISO27701 (PIMS), ISO27001 (ISMS), SOC and PCI DSS standards.
• Knowledge of data protection and privacy laws of India, and other international laws such as EU GDPR, North America would be preferred.
• Experience in data protection & data security measures (encryption, anonymization etc.)
• Professional credentials such as CISA, CISSP
• Ability to work cross-functionally, build strong relationships and partner effectively with others to address issues
• Strong organizational and time management skills
• Ability to manage competing priorities in a fast-paced environment
• Self-starter and able to work independently with minimal supervision
• Experience to operate within an international environment with a diversity of cultures
• Fluent in English, both verbally and in writing