Information Security Analyst

Greater Giving, Inc.; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Medical coverage

Wellness Week

FLEX employee network

Paid time off

Job summary

Global Payments in Pune is seeking a skilled Information Security professional to evaluate, test, and strengthen our security posture across hardware, firmware, and software. You will ensure architecture alignment with standards and lead risk assessments.

Under supervision, you'll monitor threats, investigate incidents, and help implement containment and remediation. The role also involves designing security controls like SIEM, proxy, WAF, and data protection measures.

Qualifications

• Bachelor's degree in Computer Science, Info Security, or related field.
• 2+ years of relevant experience in security operations or incident response.
• Experience with Unix/Linux, Windows, and network security.
• Professional certifications such as CISSP, CISM, or CISA preferred.

Responsibilities

• Monitor complex systems and respond to threats against the Global Payments network.
• Investigate security incidents and triage security events.
• Design and configure security systems (SIEM, proxies, WAF, IPS).
• Assess risks and conduct ISO, PCI, HIPAA, GLBA guidance.

Skills

Incident response

Threat analysis

Security operations

Risk assessment

ISO standards

Education

Bachelor's Degree in CS/Info Security

Tools

SIEM

IDS/IPS

Web application firewall

Job description

Evaluates, tests, recommends, develops, coordinates, monitors, and maintains information security policies, procedures and systems, including hardware, firmware and software . Ensures that IS security architecture/designs, plans, controls, processes, standards, policies and procedures are aligned with IS standards and overall IS security . Identifies security risks and exposures, determines the causes of security violations and suggests procedures to halt future incidents. Investigates and resolves security incidents and recommends enhancements to improve security. Develops techniques and procedures for conducting IS security risk assessments and compliance audits, the evaluation and testing of hardware, firmware and software for possible impact on system security, and the investigation and resolution of security incidents.

What Part Will You Play?

• Under moderate supervision monitors complex systems and response to known and emerging threats against the Global Payments network via intrusion detection software
• Conducts detailed, comprehensive investigation of security issues by reviewing security log data, interpreting data in support of security event management process from various data feeds and triages on a wide variety of security events.
• Under supervision performs incident handling process by maintaining knowledge in implementation of containment, protection and remediation activities.
• Enhances knowledge of new and emerging threats that can affect the organization's information assets by analyzing of third party software/solutions, IT configuration changes (including access control requests), and network/system architecture from risk perspective
• Under supervision designs and configures security systems, including proxy, remote access, mail gateway, intrusion prevention, wireless networking, data leak prevention, security information and event management and web application firewalls.
• Following guidance assesses and disseminates threats related to the enterprise in regard to current vulnerability by managing and developing an emerging threat model.
• Under supervision assesses risks based on changes to implementation of ISO(International Organization for Standardization/BSO(Business Services Online); enhances knowledge of PCI(Payment Card Industry)/Logical Security guidelines and models, HIPPA(health insurance portability and accountability act), PII(Personally Identifiable Information), and Card personalization.
• Participates in creating cost effective solutions for system/application development regarding Information Security processes and concepts in applicable systems and software.
• Works under close supervision to perform day-to-day Information Security functions pertaining to numerous security software products and processes.

What Are We Looking For in This Role?

Minimum Qualifications

• Bachelor's Degree
• Relevant Experience or Degree in: Bachelor's degree in Computer Science, Info Security, or related field. Or relevant work experience in a related field.
• Typically Minimum 2 Years Relevant Exp
• Including network operations or engineering or system administration on Unix, Linux, MAC(Message Authentication Code), or Windows; common security operations, intrusion detection systems, Security Incident Even Management systems, Penetration Testing, Web Application assessment, Secure Coding practices.

Preferred Qualifications

• Professional certifications CISSP(Certified Information System Security Professional),CISM(Certified Information Security Manager) ,CISA(Certified-Information-Systems-Auditor),GSEC(GIAC Security Essentials) ,Network +,Security +
• Typically Minimum 4 Years Relevant Exp
• Knowledge of industry standard security compliance programs PCI(Payment Card Industry), SOX(Sarbanes-Oxley) , GLBA(Gramm Leach Bliley Act), etc.)

What Are Our Desired Skills and Capabilities?

• Skills / Knowledge - Developing professional expertise, applies company policies and procedures to resolve a variety of issues.
• Job Complexity - Works on problems of moderate scope where analysis of situations or data requires a review of a variety of factors. Exercises judgment within defined procedures and practices to determine appropriate action. Builds productive internal/external working relationships.
• Supervision - Normally receives general instructions on routine work, detailed instructions on new projects or assignments.
• Risk Assessment - Ability to identify, communicate, and mitigate risk within technical solution designs
• Industry Knowledge - Continued self-education of new and emerging threats and relevant processes, controls, or technologies to mitigate them.
• Incident Response - Knowledge and skills to contribute to all phases of Incident Response.

We offer access to medical coverage that supports the health and wellbeing for you and your family

My Money

In addition to base salary, you may be eligible for bonuses and/or equity awards, determined by role, level, impact, and our policies.

My Lifestyle

We have a dedicated Wellness Week each year – which includes an extra paid day off - so you can take time to relax, recharge and invest in your wellbeing.

My Family

FLEX, our family inclusion community, offers support for all Globalpayers at every stage, from raising families to caring for loved ones

My Time Off

We offer paid time off and public holidays so you can rest, recharge and spend time on what matters most.

Privacy Statement

Global Payments is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how Global Payments protects personal information online, please see the Online Privacy Notice.

Sourcing Model

Recruitment at Global Payments works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. Global Payments does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.