Information Security Analyst

MRO; Pune District; On-site; INR 180,000 - 240,000; Full time

Job summary

MRO is seeking a seasoned Information Security professional in Pune to manage daily Infosec operations, answer questionnaires, attend client calls, and drive compliance measurements. You will oversee governance, risk, policies, and incident response while collaborating with IT, security, and business teams.

The role requires 7–8 years of experience, BE/BTech or related IT degree, and certifications like CEH or ISO 27001 LA. Fluency in English and strong communication are essential.

Qualifications

• BE/BTech or related IT degree with 7–8 years in information security.
• CEH or ISO 27001-2013 LA or equivalent certifications.
• Strong knowledge of IT security governance, risk management and compliance.

Responsibilities

• Research security enhancements and make recommendations to management.
• Stay up-to-date on information technology trends and security standards.
• Investigate security breaches and other cyber security incidents.
• Document security breaches and assess the damage they cause.
• Keep current on IT security trends and news.
• Manage risk and compliance programs.
• Answer security questionnaires from clients.
• Handle client calls for info security.
• Develop, document, and maintain information security policies, procedures, and standards.
• Initiate and promote information security awareness across the organization.
• Monitor and audit compliance to information security procedures and policies.
• Observe regulatory changes affecting information security and advise on policy changes.
• Coordinate responses to data protection requests and legal holds.
• Coordinate cyber incident response and communications per plan.
• Vendor management – evaluate tools, prepare BOM, negotiate.
• Deep understanding of infrastructure security, cloud security, and SOC.

Skills

Security governance

Security operations

Questionnaire responses

Pre-sales / RFP response

Incident response

Communication skills

English fluency

Education

BE / B.Tech

CS/IT degree

Diploma

Tools

Firewall knowledge

Job description

Location

Nanded City, Pune

Report to

Manager Compliance

Purpose of Position

Handle daily Infosec operations, answering questionnaires, attending client calls, compliance measurements.

Major Responsibilities

• Research security enhancements and make recommendations to management
• Stay up-to-date on information technology trends and security standards
• Investigate security breaches and other cyber security incidents
• Document security breaches and assess the damage they cause
• Stay current on IT security trends and news
• Risk management
• Answer security questionnaires
• Handling client calls for info sec
• Development, documentation, and maintenance of information security policies, procedures, and standards
• Initiates, facilitates, and promotes activities to create information security awareness throughout organization
• Monitors and routinely audits compliance to all information security procedures and policies, and ensures consistency of internal controls and software compliance
• Observes changes in regulations and accreditation standards affecting information security, and makes recommendations on the need for policy changes
• Coordinates response to legal requests for data protection, legal hold, access, etc.
• Coordinates the response to, investigates, escalates, mitigates, and reports actual and attempted cyber security incidents and communicates in alignment with a cyber-incident communication plan
• Vendor Management - Evaluate new tools, prepare BOM, negotiate
• Deep understanding of infrastructure (data center, network & end user computing) security / cloud security / managed security services / security operations center / compliance & risk management

Competencies

General Skills

• Knowledge on any of the following security standards
• ISO27001
• HIPAA
• HITRUST
• HITECH
• SOC2
• EHNAC
• PCI DSS
• NIST

Technical/Domain Skills

• Experience on answering security questionnaire
• A high sense of urgency and deep interest in serving the customer
• Hands on functional understanding of various technologies in security
• Proven track record in Pre-Sales, IT Outsourcing
• Self-motivated individual with excellent interpersonal skills, flexibility and team work capabilities
• Proven track record in RFI and RFP response (Pre-Sales, Solution design & development, Proposal response and presentation) in the area of Cyber Security Solutions by strongly collaborating with larger infrastructure, applications, Cloud and Digital functions
• Knowledge and experience managing IT security programs including governance, policies, risk management, architecture, and awareness
• In depth knowledge of operating systems, network elements and protocols, encryption tools, client-server and web architectures, firewalls, and intrusion detection/prevention systems, patch management, antivirus etc.
• Familiarity with application security, databases technologies, identity, and access management
• Knowledge in network protocols such TCP/IP, UDP, HTTP, TLS, SMB, SSH, RDP and any other prominent internal protocols
• Ability to present to a variety of audience from technical to managerial
• Ability to align the Cyber insider threats to the impact on the customer business of the customer etc.
• Language requirement: fluent in English, excellent communication and personality
• Understanding of cloud security solution and Security architecture and design experience
• Experience within the domain of information systems and security/data protection
• Excellent oral and written communication skills

Education

• BE / B. Tech Preferred
• Degree or PG in Computer Science or IT
• Full Time Technical Diploma

Work Experience

7-8 years of experience

Certification

CEH, ISO 27001-2013 LA, Any certification in IT security / Information security

Desired

CISSP / CISM

Advantage

CISA