Information Security Analyst

Simplify Healthcare; Pune District; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Simplify Group is seeking an Information Security Analyst in India with 2-4 years of hands-on experience in Governance, Risk & Compliance (GRC) and information security compliance. The role focuses on ISO 27001:2022, SOC 2, HITRUST, risk management, and audit support.

You will document, maintain policies, and coordinate audits with internal stakeholders for timely closure. The ideal candidate will have strong analytical and communication skills, and experience in risk assessment and remediation

Qualifications

• 2–4 years of experience in Information Security, GRC, IT Risk, or compliance.
• Working knowledge of ISO 27001:2022, SOC 2, HITRUST, and risk management.
• Hands-on experience supporting security audits and compliance activities.
• Strong documentation and analytical skills.

Responsibilities

• Support the implementation and ongoing maintenance of information security controls and processes.
• Support ISO 27001, SOC 2, HITRUST, and other information security audits and compliance assessments.
• Conduct information security and organizational risk assessments and maintain risk registers.
• Identify, document, and track risks, control gaps, and remediation actions through closure.
• Manage and maintain information security policies, procedures, standards, and compliance documentation.
• Support periodic review and updates of security policies and controls to ensure continued compliance.
• Support vendor and third-party security risk assessments and track remediation activities.
• Coordinate with internal stakeholders to collect audit evidence and ensure timely closure of compliance requirements.
• Maintain appropriate records and documentation for audits, assessments, and compliance reporting.
• Support continuous improvement of the organization's information security and GRC processes.

Skills

GRC

ISO 27001:2022

SOC 2

HITRUST

Audit support

Risk management

Documentation

Communication skills

Job description

SIMPLIFY GROUP

JOB DESCRIPTION

Information Security Analyst

Department Compliance
Experience 2 - 4 Years

Employment Type Full-Time

Role Overview
We are looking for an Information Security Analyst with 2-4 years of hands‑on experience in Governance, Risk & Compliance (GRC), information security compliance, and audit support. The ideal candidate will have practical exposure to ISO 27001:2022, SOC 2, HITRUST, risk management, security documentation, and compliance activities.
Key Responsibilities

• Support the implementation and ongoing maintenance of information security controls and processes.
• Support ISO 27001, SOC 2, HITRUST, and other information security audits and compliance assessments.
• Conduct information security and organizational risk assessments and maintain risk registers.
• Identify, document, and track risks, control gaps, and remediation actions through closure.
• Manage and maintain information security policies, procedures, standards, and compliance documentation.
• Support periodic review and updates of security policies and controls to ensure continued compliance.
• Support vendor and third‑party security risk assessments and track remediation activities.
• Coordinate with internal stakeholders to collect audit evidence and ensure timely closure of compliance requirements.
• Maintain appropriate records and documentation for audits, assessments, and compliance reporting.
• Support continuous improvement of the organization's information security and GRC processes.

Required Qualifications & Skills

• 2 -4 years of experience in Information Security, GRC, IT Risk, Compliance, or a related field.
• Working knowledge of ISO 27001:2022, SOC 2, HITRUST, and information security risk management.
• Hands‑on experience supporting security audits, assessments, and compliance activities.
• Experience with risk assessments, risk registers, and remediation tracking.
• Strong documentation, analytical, and organizational skills.
• Excellent written and verbal communication skills.
• Ability to collaborate effectively with cross‑functional teams and stakeholders.

Preferred Qualifications

• ISO 27001 certification is preferred.
• Exposure to third‑party/vendor risk management processes.
• Experience with GRC or compliance management tools.
• Experience in a SaaS, healthcare technology, or regulated industry environment is an advantage.

Simplify Group | Information Security Analyst