Senior Information Security Assurance Analyst

MiniMed Group; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

MiniMed Group is seeking a role in its Global Information Assurance & Control team based in Pune to strengthen information security governance, risk and compliance across the organization. The position focuses on independent assurance reviews, control testing, and regulatory compliance to support patient data protection and business integrity.

You will collaborate with cross-functional teams to validate controls, monitor governance processes, and drive remediation and reporting.

Responsibilities

• Conduct independent reviews of information security, governance, compliance, and controls.
• Assess control performance, monitoring activities, and governance processes to identify weaknesses and improvements.
• Validate implementation of security and regulatory requirements across business and technology environments.
• Assess adherence to information security policies, standards, governance requirements, and regulatory obligations.
• Evaluate access governance, IT General Controls (ITGC), compliance monitoring, and related governance controls.
• Validate alignment of controls with cybersecurity, privacy, and regulatory frameworks (e.g., NIST CSF, ISO 27001, HIPAA, SOX, NIS2).
• Perform risk-based control testing across cybersecurity, technology and governance domains.
• Analyze control deficiencies, audit observations, and compliance findings to identify trends and improvement opportunities.
• Assess the effectiveness of remediation activities and corrective actions.
• Document assurance observations, control deficiencies, compliance findings, and recommendations.
• Track remediation activities and report on corrective actions and issue resolution.
• Develop assurance metrics, dashboards, and reporting to support governance oversight.
• Partner with Information Security, Technology, Compliance, Privacy, Internal Audit, Risk Management, Legal, Finance, and business stakeholders to support assurance objectives.
• Communicate assurance results to technical and non-technical audiences.
• Provide independent challenge and subject matter expertise regarding information assurance, security governance, compliance monitoring, and control effectiveness.
• This role operates as an independent second-line assurance function within the Information Security Governance, Risk & Compliance (InfoSec GRC).

Job description

At MiniMed, you can begin a lifelong career of exploration and innovation, while helping make a difference in the lives of people living with diabetes around the globe. You'll lead with purpose, breaking down barriers to innovation for a more connected, compassionate world.

About the Role A Day in the Life Our Global Diabetes Capability Center in Pune is expanding to serve more people living with diabetes globally. Our state-of-the-art facility is dedicated to transforming diabetes management through innovative solutions and Technologies that reduce the burden of living with diabetes. This position is an exciting opportunity to work with Minimed’s Diabetes business.

Medtronic has announced its intention to separate the Diabetes division to promote future growth and innovation within the business and reallocate investments and resources across Medtronic, subject to applicable information and consultation requirements. This separation provides our team with a bold opportunity to unleash our potential, enabling us to operate with greater speed and agility. As a separate entity, we anticipate leveraging increased investments to drive meaningful innovation and enhance our impact on patient care.

#BetterDaysStartNow

Information Assurance & Control Effectiveness

• Conduct independent assurance reviews to evaluate the design and operating effectiveness of information security, governance, compliance, and technology controls.
• Assess control performance, monitoring activities, and governance processes to identify weaknesses, gaps, and improvement opportunities.
• Validate implementation of security, compliance, and regulatory requirements across business and technology environments.

Governance & Compliance Assurance

• Assess adherence to information security policies, standards, governance requirements, and regulatory obligations.
• Evaluate access governance, SOX IT General Controls (ITGC), compliance monitoring, and related governance controls.
• Validate alignment of controls and processes with applicable cybersecurity, privacy, and regulatory frameworks, including NIST CSF, ISO 27001, HIPAA, SOX, NIS2, BSI C5, ENS, and other applicable requirements.

Control Testing & Risk Analysis

• Perform risk-based control testing and assurance activities across cybersecurity, technology and governance domains.
• Analyze control deficiencies, audit observations, incidents, and compliance findings to identify trends and improvement opportunities.
• Assess the effectiveness of remediation activities and corrective actions designed to address identified control weaknesses.

Findings Management & Reporting

• Document assurance observations, control deficiencies, compliance findings, and recommendations for improvement.
• Track remediation activities and report on the status of corrective actions and issue resolution efforts.
• Develop assurance metrics, dashboards, and reporting to support governance oversight and informed decision-making.

Stakeholder Engagement & Advisory

• Partner with Information Security, Technology, Compliance, Privacy, Internal Audit, Risk Management, Legal, Finance, and business stakeholders to support assurance objectives.
• Communicate assurance results, observations, and recommendations to technical and non-technical audiences.
• Provide independent challenge and subject matter expertise regarding information assurance, security governance, compliance monitoring, and control effectiveness.

Independence & Scope

• This role operates as an independent second-line assurance function within the Information Security Governance, Risk & Compliance (InfoSec GRC)