Information Security Analyst

ACL Digital; Tamil Nadu; On-site; INR 600,000 - 1,000,000; Full time

Job summary

ACL Digital is seeking an Information Security & QMS Analyst in Chennai or Bengaluru to support information security, data privacy, and QMS activities aligned with ISO 9001 and ISO 27001. This office-based role involves audits, contract reviews, and project security assessments across the SDLC.

The candidate will maintain ISMS/QMS policies, coordinate audits, and work with IT, HR, Legal and Delivery teams to ensure compliance. Strong communication and documentation skills are essential.

Qualifications

• Must-have knowledge of QMS and IS frameworks; experience with ISO 9001 and ISO 27001 controls.
• Hands-on with audits (internal/external) and risk assessments; contract/privacy clause reviews.
• Ability to coordinate with IT, HR, Legal and Delivery teams to implement ISMS/QMS.

Responsibilities

• Coordinate and support audits, certifications, customer audits, and third-party reviews.
• Review MSAs and information security clauses; support privacy controls per GDPR and DPDP Act.
• Conduct and support project security audits across SDLC and Secure SDLC.
• Maintain ISMS/QMS policies, procedures, and records; track risks and corrective actions.
• Collaborate with stakeholders to audit and maintain privacy controls.
• Prepare compliance dashboards, trackers and management review inputs.

Skills

QMS

Information Security

GRC

Data Privacy

ISO 9001

ISO 27001

Audits

Contracts

GDPR

DPDP Act

Stakeholder

Job description

Information Security & QMS Analyst

Experience: 2–5 Years | Locations: Chennai (1) | Bengaluru (1)

Role Overview

Support Information Security, Data privacy, QMS activities, including audits, contract reviews, project security assessments, in alignment with ISO 9001 and ISO 27001. This is a work-from-office role.

Core Responsibilities:

• Audits & Assessments – Coordinate & support, external audit certification, customer audits, conduct internal audit, handle Information Security questionnaires and third-party vendor risk assessments.
• Contracts & Privacy – Review contracts, MSAs and Information Security clauses; support implementation of PII/privacy controls in line with GDPR and India’s DPDP Act.
• Project Security – Conduct & support project security audits covering SDLC, Secure SDLC, and secure coding practices with Project& program Delivery teams.
• QMS/ISMS – Maintain policies, procedures, standards, and records; track risks, non-conformities, corrective actions, and compliance gaps to closure.
• Stakeholder Collaboration – Work with IT, HR, Legal, Delivery, and other stakeholders to implement, audit and maintain ISMS, QMS & privacy controls.
• Awareness & Reporting – Conduct Information Security awareness sessions and prepare compliance dashboards, trackers, reports, and management review inputs.

Required Skills:

• 2–5 years of experience in QMS, Information Security, GRC and Data Privacy.
• Working knowledge of ISO 9001, ISO 27001:2022, and its 93 Annex A controls.
• Implementation knowledge of ITGC/IT controls and Information security controls.
• Experience/exposure to internal, external, and customer audits, risk assessments, third-party reviews and contract/security clause reviews.
• Working knowledge of Secure SDLC, secure coding, GDPR & India’s DPDP Act.
• Strong communication, stakeholder coordination, analytical & documentation skills.

Preferred:

• ISO 27001 / ISO 9001 Internal or Lead Auditor certification.
• Experience working in Software programming and Information Technology related organizations.
• Exposure to GRC, privacy, or Information Security governance.