Information Security Analyst

ADVANZ PHARMA; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

ADVANZ PHARMA, in Andheri, Mumbai, is seeking an Information Security Analyst to join the global IT team. Hybrid work arrangement in Andheri, Mumbai. The role focuses on strengthening the ISMS, ensuring ISO 27001:2022 compliance, and promoting a robust security culture across the business.

You will maintain security policies, coordinate audits, and drive remediation of vulnerabilities with cross-functional teams, contributing to governance, risk, and compliance activities.

Qualifications

• 2-3 years' experience in Information Security, IT Security, or Risk Management.
• Understanding of ISO 27001:2022, GDPR, and security controls.
• Familiarity with SIEM, PAM, Microsoft 365 Security, and Azure security principles.
• Strong communication, stakeholder management, and problem-solving skills.
• Experience in pharma, healthcare, or other regulated environments is an advantage.

Responsibilities

• Support and maintain ISMS in line with ISO 27001:2022 requirements.
• Manage security policies, procedures, standards, and audit documentation.
• Coordinate internal and external audits and remediation tracking.
• Monitor corrective/preventive actions and continuous improvement initiatives.
• Support GRC reviews, control testing, and security reporting.
• Track vulnerabilities and coordinate remediation with technical teams.
• Maintain security risk, vulnerability, and compliance registers.

Skills

Information Security

Risk Management

ISO 27001:2022

GRC

Tools

SIEM

PAM

Microsoft 365 Security

Azure security

Job description

Job Description:

Information Security Analyst | ADVANZ PHARMA

Andheri, Mumbai (Hybrid)

At ADVANZ PHARMA, we're on a mission to improve patients' lives by increasing access to medicines that matter. We're looking for an Information Security Analyst to join our growing global IT team in Andheri, Mumbai.

This role will play a key part in supporting and strengthening our Information Security Management System (ISMS), ensuring compliance with ISO 27001:2022, supporting governance and risk management activities, driving vulnerability remediation, coordinating audits, and promoting a strong security culture across the business.

What you’ll do:

• Support and maintain the Information Security Management System (ISMS) in line with ISO 27001:2022 requirements.
• Manage and maintain security policies, procedures, standards, and audit documentation.
• Coordinate internal and external audit activities, including evidence collection and remediation tracking.
• Monitor and track corrective actions, preventive actions, and continuous improvement initiatives.
• Support governance, risk, and compliance (GRC) reviews, control testing, and security reporting.
• Track, report, and drive remediation of identified vulnerabilities in collaboration with technical teams.
• Maintain security risk, vulnerability, and compliance registers, ensuring SLA adherence.
• Deliver and support security awareness initiatives, phishing campaigns, and employee training programmes.
• Produce security dashboards, metrics, and management reports covering incidents, risks, vulnerabilities, and compliance status.
• Collaborate across global business functions to strengthen ADVANZ PHARMA's security posture while championing a culture of entrepreneurship, speed, integrity, and continuous improvement.

What we’re looking for:

• 2-3 years' experience in Information Security, IT Security, or Risk Management
• Understanding of ISO 27001:2022, GDPR, and security controls
• Familiarity with SIEM, PAM, Microsoft 365 Security, and Azure security principles
• Strong communication, stakeholder management, and problem-solving skills
• Experience in pharma, healthcare, or other regulated environments is an advantage

Why join ADVANZ PHARMA?

Join a fast-growing international pharmaceutical company where entrepreneurship, speed, and integrity drive everything we do. You'll have the opportunity to make a tangible impact, work with global teams, enjoy flexible hybrid working, and contribute to a purpose-led organisation dedicated to improving patient outcomes worldwide.