Security Assurance Specialist

PowerToFly; India; On-site; INR 900,000 - 1,500,000; Full time

Job summary

PowerToFly is seeking a Security Assurance Analyst in India to execute security assurance activities focused on access control compliance and third-party security assessments. You will collaborate with IT, HR, and business units to ensure adherence to security policies and standards.

Key duties include planning periodic reviews across regions, coordinating with facilities for physical access, and evaluating vendor security controls.

Qualifications

• Experience in executing security assurance activities related to access control compliance.
• Experience conducting supplier/vendor security assessments and evaluating evidence.
• Ability to document findings and track remediation actions.
• Strong collaboration with IT, HR, procurement, facilities and business teams.

Responsibilities

• Plan periodic physical and logical access control compliance reviews across regions.
• Coordinate logical access reviews to validate policy compliance.
• Coordinate physical access reviews with regional facilities teams.
• Document findings, track remediation actions and report status to Head of Security Assurance.
• Conduct security assessments for new and existing suppliers and third-party providers.
• Review security questionnaires, audit reports and supporting evidence.
• Assess vendor security controls against organizational requirements and identify risks.
• Support periodic reassessments of critical vendors as part of third-party risk management.
• Coordinate evidence collection for audits and maintain compliance documentation.
• Support the Security Unit in executing assurance initiatives as assigned by the CISOs.

Skills

Access Control Compliance

Vendor Security Assessments

Security Documentation

Stakeholder Collaboration

Education

Job description

The Security Assurance Analyst is responsible forexecuting security assurance activities related to access control compliance and third-party security assessments. The role collaborates with internal teams and business stakeholders to ensure compliance with organizational security policies and applicable standards.

Key Responsibilities

• Access Control Compliance

• Collaborate with the Head of Security Assurance to plan periodic physical and logical access control compliance reviews across all regions.

• Work with IT, HR, and business teams to conduct logical access reviews andvalidatecompliance with organizational policies.

• Coordinate with regional physical security and facilities teams to execute physical access control reviews as per the defined review frequency.

• Document findings, track remediation actions, and report compliance status to the Head of Security Assurance.

• Supplier & Vendor Security Assessments

• Conduct security assessments for new and existing suppliers, vendors, and third-party service providers.

• Review security questionnaires, certifications, audit reports, and supporting evidence.

• Assess vendor security controls against organizational requirements and identify potential risks.

• Document assessment findings, recommend remediation actions, and track risk mitigation with relevant stakeholders.

• Support periodic reassessments of critical vendors as part of the third-party risk management program.

• Other activities

• Coordinate with IT, HR, Procurement, Facilities, and business teams to ensuretimelycompletion of security assurance activities.

• Support internal and external audits by coordinating evidence collection, tracking remediation actions, andmaintainingcompliance documentation.

• Supportthe Security Unit function in executing security assurance initiatives and other securityrelated activities as assigned by the CISOSecurity Assurance manager.