Information Security Analyst

About the Client

We are calling candidates on behalf of a global digital transformation and technology services organization delivering innovative IT solutions across industries including banking, healthcare, telecom, retail, and enterprise technology. With a strong focus on cybersecurity, governance, compliance, and operational excellence, the organization supports large-scale enterprise environments and mission-critical applications worldwide.

Job Overview

We are looking for a highly motivated Information Security Analyst to join the Control Factory / Information Security Operations team. The ideal candidate will have hands-on experience in technology risk management, IT audit, cybersecurity operations, compliance assessments, and remediation coordination.

The role involves working closely with technology teams, asset owners, and stakeholders to perform security assessments, ensure compliance adherence, manage remediation activities, and support BAU (Business As Usual) security operations.

Key Responsibilities

Operational & Security Compliance Support

1. Coordinate with technology and application teams to perform security and compliance assessments as part of BAU processes.
2. Work with Technology Asset Owners (TAOs) to implement and maintain control assessment processes.
3. Conduct assessments to identify security risks, compliance gaps, and process deviations as per SOPs and internal security standards.
4. Track remediation activities and ensure timely closure of identified findings.
5. Perform periodic reviews and proactive compliance assessments.

Risk & Control Management

1. Understand and evaluate IT controls, cyber security controls, and technology risk frameworks.
2. Develop and maintain control inventories for applications and systems.
3. Assess applications and infrastructure against defined security controls and standards.
4. Analyze deviations and prepare remediation plans following documented procedures.
5. Support audit and regulatory requirements through process adherence and evidence management.

Stakeholder & Process Coordination

1. Collaborate with internal stakeholders on remediation and governance activities.
2. Communicate assessment results, compliance findings, and progress updates effectively.
3. Manage workflow tickets using tools like JIRA and ServiceNow.
4. Maintain process documentation and knowledge repositories in Confluence or similar collaboration tools.

Continuous Improvement & Automation

1. Identify opportunities for process automation and operational efficiency improvements.
2. Contribute to innovation initiatives that enhance stakeholder experience and security operations.
3. Support knowledge-sharing and process standardization initiatives.

Required Skills & Experience

Core Technical Skills

1. 4–5 years of experience in:
2. Information Security
3. Cybersecurity Operations
4. IT Audit
5. Technology Risk Management (TRM)
6. IT Compliance / Governance

Functional Knowledge

1. Understanding of:
2. Windows and Unix/Linux operating systems
3. Databases and networking concepts
4. Firewalls, LDAP, Active Directory (AD), and Cloud technologies
5. Authentication & Authorization mechanisms
6. APIs, interfaces, logging, and monitoring
7. Application architecture and design concepts
8. Data classification and application criticality

Tools & Platforms

Experience with:

1. JIRA
2. Confluence
3. ServiceNow
4. Archer (preferred)
5. MS Office Suite (Excel, Word, PowerPoint, Visio)
6. PDF/documentation tools

Soft Skills

1. Strong analytical and problem-solving skills
2. Excellent communication and stakeholder management abilities
3. Ability to follow structured operational processes
4. Good documentation and reporting skills
5. Self-learning attitude and adaptability to new technologies

Preferred Qualifications

1. Degree or Diploma in IT, Computer Science, Information Security, or related technology stream
2. Industry-recognized certifications are preferred:
3. Microsoft Certifications
4. Cloud Certifications
5. Cybersecurity Certifications
6. IT Governance / Audit Certifications

Nice to Have

1. Experience in project management or governance coordination
2. Exposure to enterprise security frameworks and audit processes
3. Knowledge of automation initiatives in security operations