Information Security Analyst

HID; Chennai District; On-site; INR 800,000 - 1,200,000; Full time

Benefits offered by this job

Flexible work arrangements

Training and development opportunities

Diverse and inclusive teams

Job summary

HID in Chennai is seeking an experienced Information Security professional to perform risk assessments and audits. The ideal candidate will have a strong background in information security, effective communication, and a collaborative approach. Responsibilities include conducting ISMS audits, analyzing regulatory requirements, and advising on compliance strategies.

The position requires a Bachelor's degree in IT or a related field and at least 3 years in the field. Join HID and be part of a global leader in secure identity solutions.

Qualifications

• Minimum 3+ years of experience in information security.
• Strong verbal and written communication skills.
• Knowledge of cloud security.

Responsibilities

• Conduct risk assessments and security due diligence.
• Prepare comprehensive risk assessment reports.
• Monitor, analyze, and report on emerging cybersecurity threats.

Skills

Information security risk

Communication

Collaboration

Analytical skills

Education

Bachelor's degree in Information Technology or related field

Preferred graduate degree

Tools

ISO 27001

NIST CSF

SOC 2

PCI DSS

Job description

Profile Summary

This role is primarily responsible for performing risk assessments, third‑party reviews, internal audit, information security control and system review and design. The successful candidate should have broad information security and risk experience, a high degree of professionalism, a friendly and collaborative demeanor, and strong verbal, written, and organizational skills. This position typically reports to the Manager of Information Security.

About HID Global

HID Global powers the trusted identities of the world’s people, places and things. We make it possible for people to transact safely, work productively and travel freely. Our trusted identity solutions give people secure and convenient access to physical and digital places and connect things that can be accurately identified, verified and tracked digitally. Millions of people around the world use HID products and services to navigate their everyday lives, and over 2 billion things are connected through HID. HID Global operates international offices that support more than 100 countries and is the trusted source for secure identity solutions for millions of customers and users worldwide.

Are You Ready to Join the Team?

Our company is committed to finding the best and the brightest talent to help us reach the top. If you are a dynamic, highly skilled, experienced cloud engineer and technology enthusiast, and you enjoy working in a rapid pace within a rapidly growing business environment, then you will want to consider this position. If you excel at communication, collaboration, and unrelenting innovation, we want to talk to you. And if you bring dedication, positive energy and integrity to the table, you just might be the right fit for our team.

Qualifications

The individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Duties and Responsibilities

• Support internal and external audit programs, including evidence collection, control validation, issue tracking, and remediation verification.
• Conduct Information Security Management System (ISMS) audits in alignment with standards and frameworks such as ISO 27001, SOC 2, NIST, and applicable regulatory requirements.
• Conduct risk assessments and security due diligence for third‑party vendors, suppliers, and business partners to identify and mitigate cyber, operational, and compliance risks.
• Analyze security, privacy, and regulatory requirements to evaluate risk exposure and recommend appropriate remediation strategies.
• Prepare comprehensive risk assessment reports, dashboards, and executive‑level summaries to support informed business decision‑making.
• Perform control design and effectiveness reviews across business processes, applications, and infrastructure environments.
• Assess new technologies, cloud services, and business initiatives to ensure security and compliance requirements are embedded throughout the lifecycle.
• Partner with application owners, engineering teams, and business stakeholders to identify vulnerabilities, assess risk impact, and drive timely remediation efforts.
• Monitor, analyze, and report on emerging cybersecurity threats, industry trends, regulatory changes, and best practices to enhance organizational resilience.
• Develop and maintain risk metrics, key risk indicators (KRIs), and governance reporting to measure and communicate risk posture.
• Contribute to continuous improvement initiatives by enhancing risk management methodologies, audit processes, and security governance practices.
• Provide subject‑matter expertise and support for security awareness, compliance initiatives, and cross‑functional risk management activities.
• Perform additional responsibilities and special projects assigned in support of the organization’s security and compliance objectives.

Preferred Qualifications

• Minimum 3-5 years of experience in information security risk and compliance.
• Familiarity with ISO 27001, NIST CSF, SOC 2, PCI DSS, CSA STAR and related risk assessment methodologies.
• Knowledge of enterprise network and systems architecture concepts and technologies, including enterprise directory, enterprise integration architecture, and identity & access management.
• Thorough knowledge and understanding of security risk assessment on all information systems such as people, process, technology, and information processing facilities.
• Knowledge of cloud security.
• Prepare risk assessment report and risk treatment plan.
• Conduct information security awareness session to end users / middle management.
• Certifications such as ISO 27001, CISA, CISM, CRISC, AWS Security Cloud Certifications will be an added advantage.
• Self‑starter and lead the risk analysis in assigned areas with minimum supervision.
• Strong technical background in technical systems/environments.
• Strong written and verbal communication skills.
• Ability to develop good working relationships and excellent interpersonal skills.
• Capable of working independently and as part of a team.

Education And/Or Qualification

• An undergraduate degree in Information Technology, Computer Science, Engineering, or a related field required, with a preferred graduate degree.
• Minimum 3+ years of experience in information security, Governance Risk and Compliance.
• Demonstrated ability to communicate effectively and professionally in English, both verbally and in writing, across technical and non‑technical audiences.
• Strong analytical and documentation skills, with the ability to interpret and apply technical standards, regulatory requirements, security frameworks, audit reports, and industry publications.
• Ability to translate complex technical concepts into clear, actionable recommendations for business stakeholders and leadership.
• Proficiency in reviewing and understanding security policies, technical specifications, risk assessments, compliance requirements, and industry best practices.

Why apply?

• Empowerment: You’ll work as part of a global team in a flexible work environment, learning and enhancing your expertise. We welcome an opportunity to meet you and learn about your unique talents, skills, and experiences. You don’t need to check all the boxes. If you have most of the skills and experience, we want you to apply.
• Innovation: You embrace challenges and want to drive change. We are open to ideas, including flexible work arrangements, job sharing or part‑time job seekers.
• Integrity: You are results‑oriented, reliable, and straightforward and value being treated accordingly. We want all our employees to be themselves, to feel appreciated and accepted.

This opportunity may be open to flexible working arrangements.

HID is an Equal Opportunity/Affirmative Action Employer – Minority/Female/Disability/Veteran/Gender Identity/Sexual Orientation.

When you join our HID team, you’ll also be part of the ASSA ABLOY Group, the global leader in access solutions. You’ll have 63,000 colleagues in more than 70 different countries. We empower our people to build their career around their aspirations and our ambitions – supporting them with regular feedback, training, and development opportunities. Our colleagues think broadly about where they can make the most impact, and we encourage them to grow their role locally, regionally, or even internationally. As we welcome new people on board, it’s important to us to have diverse, inclusive teams, and we value different perspectives and experiences.