Information Security Analyst

FIS Solutions (India) Private Limited - Pune; Pune District; Hybrid; INR 900,000 - 1,200,000; Full time

Benefits offered by this job

Internal career growth opportunities

Privacy & security focus

Continuous learning

Collaborative work environment

Fintech industry exposure

Flexibility (hybrid work)

Job summary

FIS Solutions (India) Private Limited - Pune is seeking an Analyst II, Information Security to support ISMS, privacy, risk management and compliance. You will lead audit engagements, assess information security risks and collaborate with stakeholders to support certification and surveillance audits, driving remediation and continuous improvement.

You will strengthen security processes through documentation, audits and agile collaboration in a hybrid Pune environment.

Qualifications

• Three to four years of hands-on experience with information security management systems, data privacy, risk management and compliance.
• Experience implementing or maintaining an ISO/IEC 27001-certified ISMS with audit evidence and remediation tracking.
• Knowledge of ISO/IEC 27701:2025 requirements, privacy principles and PII lifecycle; GDPR understanding.

Responsibilities

• Lead ISMS audit engagements per ISO/IEC 27001:2022, ISO/IEC 27701:2025 and TISAX requirements.
• Identify and evaluate digital information risks; work with stakeholders on mitigations.
• Support external certification, surveillance and client audits; coordinate evidence requests and management responses.
• Develop and review ISMS documentation, risk registers, audit reports and corrective action plans.
• Prepare audit summaries, status updates and remediation trackers; suggest process improvements.

Skills

ISMS auditing

Privacy & GDPR

Risk management

Audit coordination

Job description

Innovation isn’t just what we do; it’s how we work. At FIS, you’ll collaborate with talented people across the globe to create solutions that shape the way the world pays, banks and invests. If you’re ready to grow your career while making a meaningful impact, we’d love to meet you.

Role location

Pune - Hybrid (three days in-office, two days virtual)

About the role

As an Analyst II, Information Security, you’ll support information security management system (ISMS), privacy, risk management and compliance activities. You’ll lead audit engagements, assess information security risks and work with stakeholders to support certification and surveillance audits. You’ll also help strengthen security processes through remediation and continuous improvement.

Your key responsibilities

• Lead ISMS audit engagements in accordance with ISO/IEC 27001:2022, ISO/IEC 27701:2025 and TISAX requirements.
• Identify and evaluate risks to digital information, working with stakeholders to establish and implement appropriate risk mitigation measures.
• Support external certification, surveillance and client audits by coordinating evidence requests, stakeholder discussions, audit walkthroughs and management responses.
• Develop, maintain and periodically review ISMS documentation, risk registers, audit reports and corrective action plans.
• Prepare audit summaries, status updates, remediation trackers and management reports, while identifying opportunities to strengthen security processes and procedures.

What you bring

Required qualifications

• Three to four years of hands-on experience with information security management systems, data privacy, risk management and compliance.
• Practical experience implementing or maintaining an ISO/IEC 27001-certified ISMS, including maintaining documentation and audit evidence, reviewing controls, identifying gaps and tracking remediation.
• Strong knowledge of ISO/IEC 27701:2025 requirements, privacy principles, the responsibilities of personally identifiable information (PII) controllers and processors, and the personal data lifecycle.
• Knowledge of the General Data Protection Regulation (GDPR) and other applicable privacy and data protection regulations, with experience supporting certification, surveillance and recertification audits.
• ISO/IEC 27001:2022 Lead Auditor certification.

Preferred qualifications

• Exposure to SOC 1, SOC 2, PCI DSS, IT General Controls, privacy, cloud security, third-party risk management or regulatory compliance assessments.
• CISA, CISSP, CRISC or an equivalent information security qualification.

What we offer you

• Internal career growth opportunities
• A voice in the future of fintech
• Always-on learning and development
• Collaborative work environment
• Opportunities to give back
• Privacy Statement

Sourcing Model Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass