Security Assurance Specialist

SoftwareONE Deutschland GmbH; Gurugram District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

SoftwareOne is seeking a Security Assurance Analyst in Gurugram (India) to execute security assurance activities, including access control compliance and third-party security assessments. You will collaborate with IT, HR, procurement, and business teams to ensure policy compliance.

The role requires 5–10 years in IT, experience in information security or GRC, and ISO lead auditor certifications are desirable. Join a global team driving secure software and cloud solutions.

Qualifications

• Bachelor's degree in engineering or information technology or computer science, or a related discipline.
• 5–10 years of experience in Information Technology.
• ISO/IEC 27001 Lead Auditor or Internal Auditor Certification desirable; ISO/IEC 42001 Lead Auditor or Internal Auditor Certification desirable.

Responsibilities

• Plan periodic physical and logical access control compliance reviews across all regions.
• Conduct logical access reviews with IT, HR, and business teams; validate policy compliance.
• Coordinate with regional security and facilities teams to execute physical access reviews as per defined schedule.
• Document findings, track remediation actions, and report compliance status to Head of Security Assurance.
• Conduct security assessments for suppliers, vendors, and third-party service providers.
• Review security questionnaires, certifications, audit reports and supporting evidence.
• Assess vendor security controls against organizational requirements and identify potential risks.
• Document assessment findings, recommend remediation actions, and track risk mitigation with relevant stakeholders.
• Support periodic reassessments of critical vendors as part of the third-party risk management program.
• Coordinate with IT, HR, Procurement, Facilities, and business teams to ensure timely completion of security assurance activities.
• Support internal and external audits by coordinating evidence collection, tracking remediation actions, and maintaining compliance documentation.
• Assist the Security Unit in executing security assurance initiatives as assigned by the CISO Security Assurance manager.

Skills

Information Security

Security Assurance

IT Audit

GRC

Education

Bachelor's degree in engineering/IT/CS

Job description

Why SoftwareOne?

SoftwareOne is a global provider of software and cloud solutions. With a presence in over 70 countries and more than 12,000 professionals, we help organizations optimize software investments, modernize applications, and unlock the value of cloud, data, and AI. Our people are at the core of everything we do. We enable collaboration across borders, continuous learning, and opportunities to grow in a fast-evolving technology landscape. Whether your focus is on technology, customer success, or business operations, your ideas matter, and your contributions make a difference. Join a global team where you can build your skills, work with leading technologies, and make a real impact for our customers.

The role

The Security Assurance Analyst is responsible for executing security assurance activities related to access control compliance and third-party security assessments. The role collaborates with internal teams and business stakeholders to ensure compliance with organizational security policies and applicable standards.

Key Responsibilities

Access Control Compliance

• Collaborate with the Head of Security Assurance to plan periodic physical and logical access control compliance reviews across all regions.
• Work with IT, HR, and business teams to conduct logical access reviews and validate compliance with organizational policies.
• Coordinate with regional physical security and facilities teams to execute physical access control reviews as per the defined review frequency.
• Document findings, track remediation actions, and report compliance status to the Head of Security Assurance.

Supplier & Vendor Security Assessments

• Conduct security assessments for new and existing suppliers, vendors, and third-party service providers.
• Review security questionnaires, certifications, audit reports, and supporting evidence.
• Assess vendor security controls against organizational requirements and identify potential risks.
• Document assessment findings, recommend remediation actions, and track risk mitigation with relevant stakeholders.
• Support periodic reassessments of critical vendors as part of the third-party risk management program.

Other activities

• Coordinate with IT, HR, Procurement, Facilities, and business teams to ensure timely completion of security assurance activities.
• Support internal and external audits by coordinating evidence collection, tracking remediation actions, and maintaining compliance documentation.
• Support the Security Unit function in executing security assurance initiatives and other security related activities as assigned by the CISO Security Assurance manager.

What we need to see from you

• Bachelor's degree in engineering or information technology or computer science, or a related discipline.
• 5-10 years of experience in Information Technology.
• Experience in Information Security, Security Assurance, IT Audit, or Governance, Risk & Compliance (GRC) is an added advantage.
• ISO/IEC 27001 Lead Auditor or Internal Auditor Certification, ISO/IEC 42001 Lead Auditor or Internal Auditor Certification is desirable.

Job Function

IT & Solutions

Accommodations

SoftwareOne welcomes applicants from all backgrounds and abilities to apply. Any information shared will be stored securely and treated in the strictest of confidence in line with GDPR. At SoftwareOne, we are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Additionally, we encourage experienced individuals that have taken an intentional career break and are now prepared to return to work to explore our SOAR program.