Information Security Officer

Openhire; Chennai; Sur place; INR 600 000 - 1 200 000; Plein temps

Résumé du poste

Openhire is seeking an Information Security Officer/Analyst to implement security controls, coordinate compliance activities, monitor risks, and support audits across the organization. The role collaborates with IT, HR, Legal, Privacy and business teams to ensure consistent policy implementation and timely closure of security actions.

Responsibilities include maintaining control documentation, supporting ISO 27001, SOC 2, HIPAA assessments, conducting access reviews, and tracking remediation

Qualifications

• Bachelor's degree in information security, cybersecurity, CS, IT or related field.
• 2–4 years of relevant experience in Information Security, Cybersecurity, IT Risk or Compliance.
• Working knowledge of ISO 27001, SOC 2, HIPAA, risk assessment, IAM, vulnerability management, incident management and security awareness.

Responsabilités

• Support implementation of information security policies, standards and procedures.
• Maintain security control documentation, evidence, trackers and dashboards.
• Support periodic review and update of security policies.
• Track security risks, action items and remediation status.
• Support ISO 27001, SOC 2, HIPAA and other security/privacy assessments.
• Coordinate collection and organisation of audit evidence.
• Track audit findings and remediation actions.
• Support internal and external audit activities and maintain compliance records.
• Support user access provisioning, modification and removal processes.
• Conduct periodic access reviews and track privileged and sensitive access.
• Coordinate with IT and business owners to address access exceptions.
• Ensure joiner/mover/leaver security controls are completed.
• Track vulnerability assessments and remediation activities.
• Coordinate with IT and Engineering teams on vulnerability closure.
• Support security monitoring and investigation of alerts.
• Escalate suspicious activities or incidents to the senior security team.
• Maintain incident records and documentation.
• Support employee information security awareness programmes and phishing-awareness campaigns.
• Coordinate security training, track completion and assist with security drills.
• Support vendor security assessments and security questionnaires.
• Maintain third-party security assessment records and track outstanding actions.
• Work with IT, Engineering, HR, Legal, Privacy and business teams on security requirements.
• Follow up with stakeholders to ensure timely completion of security activities.
• Escalate delays, risks and exceptions to senior Information Security leadership.
• Support global security teams when India-specific information or documentation is required.

Connaissances

Information security

Policy enforcement

Audit coordination

Documentation

Stakeholder management

Vulnerability management

Incident management

Access control

Formation

Bachelor's degree in Information Security, Cybersecurity, Computer Science, IT or related field

Outils

AWS

Azure

GCP

IAM

Vulnerability scanners

Description du poste

We are looking for an Information Security Officer / Analyst to support the Information Security function by implementing security controls, coordinating compliance activities, monitoring risks, supporting audits and assessments, and ensuring timely closure of security actions.

The role will work closely with Information Security, IT, Engineering, HR, Legal, Privacy and business teams to ensure that security policies and controls are consistently implemented across the organisation.

Key Responsibilities

• Support implementation of Information Security policies, standards and procedures.
• Maintain security control documentation, evidence, trackers and dashboards.
• Support periodic review and update of security policies.
• Track security risks, action items and remediation status.id
• Support ISO 27001, SOC 2, HIPAA and other security/privacy assessments.
• Coordinate collection and organisation of audit evidence.
• Track audit findings and remediation actions.
• Support internal and external audit activities and maintain compliance records.
• Support user access provisioning, modification and removal processes.
• Conduct periodic access reviews and track privileged and sensitive access.
• Coordinate with IT and business owners to address access exceptions.
• Ensure joiner/mover/leaver security controls are completed.
• Track vulnerability assessments and remediation activities.
• Coordinate with IT and Engineering teams on vulnerability closure.
• Support security monitoring and investigation of alerts.
• Escalate suspicious activities or incidents to the senior security team.
• Maintain incident records and documentation.
• Support employee Information Security awareness programmes and phishing-awareness campaigns.
• Coordinate security training, track completion and assist with security drills.
• Support vendor security assessments and security questionnaires.
• Maintain third-party security assessment records and track outstanding actions.
• Work with IT, Engineering, HR, Legal, Privacy and business teams on security requirements.
• Follow up with stakeholders to ensure timely completion of security activities.
• Escalate delays, risks and exceptions to senior Information Security leadership.
• Support global security teams when India-specific information or documentation is required.

Experience & Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, IT or a related field.
• 2–4 years of relevant experience in Information Security, Cybersecurity, IT Risk or Compliance.
• Working knowledge of ISO 27001, SOC 2, HIPAA, risk assessment, IAM, vulnerability management, incident management and security awareness.
• Exposure to cloud security environments such as AWS, Azure or GCP preferred.
• Experience supporting audits and security assessments.
• Strong documentation and coordination skills.
• Ability to work with multiple stakeholders and follow issues through to closure.
• Healthcare or health-tech experience is an advantage.