Security Analyst

Ventra Health, Inc.; Chennai District; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Ventra Health, Inc. is seeking an experienced Security Analyst to support the organization’s Information Security Management System (ISMS) and ISO/IEC 27001 initiatives.

The role blends hands-on security work with auditing, risk management, and continual improvement to strengthen the organization’s security posture. The candidate will conduct audits, manage risks, track findings, and assist with certification activities, incident response, and vulnerability management across networks, endpoints,

Qualifications

• Knowledge of ISO/IEC 27001 requirements and internal auditing.
• Experience in risk assessments and control effectiveness evaluations.
• Familiarity with security incident response and remediation.
• Ability to document findings and produce management reports.

Responsibilities

• Conduct internal ISMS and ISO 27001 audits and assess control effectiveness.
• Review security policies, standards, and control evidence.
• Document risks, gaps, observations and non-conformities.
• Perform risk assessments and maintain the ISMS risk register.
• Track audit findings and verify remediation evidence.
• Support ISO 27001 certification and surveillance audits.
• Monitor networks, endpoints, and systems for threats.
• Assist with incident response, investigations and reporting.
• Coordinate vulnerability and patch management activities.
• Support access management and periodic user access reviews.
• Configure and maintain security tools including firewalls and endpoints.
• Assist with data protection, classification, and secure handling.
• Participate in third-party security assessments.
• Contribute to business continuity and DR security requirements.
• Prepare security and compliance reports for management.

Skills

ISO/IEC 27001

ISMS

IT Auditing

Risk Assessment

Security Monitoring

Vulnerability Management

Firewalls

Endpoint Security

Documentation

Communication Skills

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

SIEM

Security Monitoring Tools

Network Security Tools

Job description

Ventra is a leading business solutions provider for facility-based physicians practicing anesthesia, emergency medicine, hospital medicine, pathology, and radiology. Focused on Revenue Cycle Management, Ventra partners with private practices, hospitals, health systems, and ambulatory surgery centers to deliver transparent and data-driven solutions that solve the most complex revenue and reimbursement issues, enabling clinicians to focus on providing outstanding care to their patients and communities.

Job Summary

• The Security Analyst Experienced will be responsible for supporting the organization's Information Security and Information Security Management System (ISMS). The role combines hands‑on information security activities with internal ISMS auditing, risk management, compliance, and continual improvement in alignment with ISO/IEC 27001 requirements.

Essential Functions and Tasks

• Conduct internal ISMS and ISO 27001 audits and assess the effectiveness of security controls.
• Review information security policies, procedures, standards, and control evidence.
• Identify and document security risks, control gaps, observations, and non‑conformities.
• Perform information security risk assessments and support maintenance of the ISMS risk register.
• Track audit findings and corrective actions and validate remediation evidence through closure.
• Support ISO 27001 certification, surveillance audits, and management reviews.
• Monitor security systems, networks, endpoints, and infrastructure for threats and suspicious activity.
• Support security incident identification, investigation, response, and documentation.
• Coordinate vulnerability management, patch management, and remediation activities.
• Support access management, privileged access, and periodic user access reviews.
• Configure, troubleshoot, and maintain security tools and infrastructure, including firewalls, endpoint security, authentication, and monitoring solutions.
• Support security logging, alerting, and investigation activities.
• Assist with data protection, information classification, and secure handling of sensitive information.
• Participate in third‑party/vendor security assessments where required.
• Support business continuity and disaster recovery security requirements.
• Identify security requirements and recommend solutions to improve the organization's security posture.
• Develop and implement security improvements and automation for repeatable security tasks.
• Support security awareness and training initiatives.
• Prepare security, audit, risk, and compliance reports for management.
• Ensure compliance with organizational security policies and applicable information security standards.
• Contribute to the continual improvement of the organization's ISMS and overall security posture.

Education and Experience Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field preferred.
• Minimum 2 years of experience in Information Security, ISMS, IT Audit, IT Compliance, GRC, or a related security role.

Knowledge, Skills, and Abilities

• Good practical understanding of ISO/IEC 27001, information security controls, risk management, and internal auditing.
• Working knowledge of security technologies such as firewalls, endpoint security, authentication, network security, vulnerability management, and security monitoring.
• Strong analytical, problem‑solving, documentation, and communication skills.
• Strong attention to detail and ability to work with both technical and business teams.

Compensation

• Base Compensation will be based on various factors unique to each candidate including geographic location, skill set, experience, qualifications, and other job‑related reasons.
• This position is also eligible for a discretionary incentive bonus in accordance with company policies.

Equal Employment Opportunity (Applicable only in the US)

Ventra Health is an equal opportunity employer committed to fostering a culturally diverse organization. We strive for inclusiveness and a workplace where mutual respect is paramount. We encourage applications from a diverse pool of candidates, and all qualified applicants will receive consideration for employment without regard to race, color, ethnicity, religion, sex, age, national origin, disability, sexual orientation, gender identity and expression, or veteran status. We will provide reasonable accommodations to qualified individuals with disabilities, as needed, to assist them in performing essential job functions.