Data Security & Protection Analyst - Digital IT

Egon Zehnder; Gurugram District; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Health Benefits

Accident Insurance

Personal development and training

Employee friendly policies

Reward and Recognition

5 days working in a fast-paced work environment

Job summary

Egon Zehnder in Gurgaon is seeking a candidate for a critical role focusing on cybersecurity and data privacy. This position involves responding to client data security requests, collaborating with IT and Legal teams, and ensuring compliance with laws such as GDPR.

Successful candidates will have experience in cybersecurity solutions and risk management. Benefits include a fast-paced work environment, direct access to senior management, and health benefits. Join us to develop your career in a diverse and supportive culture.

Qualifications

• Experience in RFI and RFP response in Cyber Security Solutions.
• 3-5 years of Information Security experience preferably in banking.
• Familiarity with GDPR and other data privacy laws.

Responsibilities

• Provide responses to Data Security and Protection Requests.
• Work with IT and Legal teams to ensure accurate RFP responses.
• Assess gaps in policies and develop risk reduction strategies.
• Collaborate across functions to identify cybersecurity gaps.
• Drive cyber and information security awareness globally.

Skills

Audit and compliance

Cybersecurity, Information security

Data privacy, GDPR, Privacy laws

Documentation management

Risk assessment, Gap analysis

Microsoft Office proficiency

Job description

Position

This is a critical role at the cusp of cyber security and data privacy. The individual will have a direct line of reporting to the Director and a dotted line reporting to Egon Zehnder’s Legal Counsel.

Key Result Areas

• Provide responses to Data Security and Protection Requests for client proposals (RFP), audit questionnaires and other documents to Egon Zehnder clients from an IT and data privacy perspective as received from the business or legal team.
• Work closely with various IT functions and the Legal team to ensure that technical knowledge is maintained, and that RFPs and other client responses can be answered accurately and timely.
• Assess gaps in policies, processes and cybersecurity technology while reviewing and responding to the above RFPs, and develop proposals and suggestions for mitigation or risk reduction.
• Stay updated on various Data privacy laws such as GDPR, CCPA and similar laws mandated by different countries, and propose additional controls and policies for our local offices to remain compliant.
• Collaborate cross‑functionally with roles such as IT infrastructure, Digital/application development, and Legal to identify and highlight gaps and risks with existing applications and technologies around Cybersecurity and Data Protection laws.
• Be responsible for the adoption and implementation of standard frameworks such as NIST.
• Adopt new controls and align cybersecurity policies as per well‑known standards such as ISO 27001 for reduced scrutiny and quick closures of RFPs.
• Actively participate in driving the Risk management function around information and cyber security, maintaining the risk register, and improving the risk maturity level of the firm.
• Assess risk imposed by technical solutions and advise the business on security standards, best practice and solutions to address data security and protection risk.
• Actively participate in running internal data security and protection audits, including gap analysis of current IT security policies, processes, systems and controls.
• Be responsible for driving cyber and information security awareness and training campaigns globally for Egon Zehnder offices.

Experience and Key Competencies

• Experience in RFI and RFP response in the area of Cyber Security Solutions, including infrastructure security, security monitoring / analytics / incident response, risk & compliance management, identity & access management and data security solutions.
• 3‑5 years of Information Security, vendor risk management and/or other risk management experience preferably in banking or financial services industry.
• Experience and affinity with data privacy laws, namely GDPR.
• Familiar with regulatory and industry standards such as NIST, ISO 27001, etc. and SOC 1/SOC 2 audit reports.
• Ability to answer complex risk assessments and questionnaires across all domains of IT Security.
• Understanding of enterprise security systems (e.g., Firewalls, VPN, SIEM), security threats and related risks, data loss prevention, malware protection, etc.
• Ability to adapt to a fast‑moving IT landscape and keep pace with the latest thinking and new security technologies.
• Capability to understand, analyze, and interpret legal, contractual language, and summarize findings in a concise, articulate manner.
• Ability to be discrete and maintain confidentiality with respect to agreement contents and other highly sensitive business matters and projects.

Skill Set

• Audit and compliance
• Cybersecurity, Information security
• Data privacy, GDPR, Privacy laws
• Documentation management
• Risk assessment, Gap analysis
• Microsoft Office proficiency

Benefits

• 5 days working in a fast‑paced work environment
• Work directly with the senior management team
• Reward and Recognition
• Employee friendly policies
• Personal development and training
• Health Benefits, Accident Insurance

Potential Growth for you!

We will nurture your talent in an inclusive culture that values diversity. You will have regular catch‑ups with your Manager, who will act as your career coach and guide you in your career goals and aspirations.

Location

The position is based at Egon Zehnder’s KCI office in Gurgaon, Plot no. 29, Institutional Area Sector 32.

Equal Employment Opportunity

Egon Zehnder provides equal employment opportunities to all applicants and employees without regard to race, color, creed, religion, sex, sexual orientation, gender identity, marital status, citizenship status, age, national origin, disability, or any other legally protected status and affirmatively seeks to advance the principles of equal employment opportunity.