Job Description:

Job Title: Associate Information Security Analyst
Experience: 1 to 3 Years
Job Location: Hyderabad
Mode of Work: Work from office
    
    Required Skills:
        
    Experience in managing security audits, such as ISO 27001, SOC I / II including preparing control owners for audits, interpreting control requirements, reviewing control evidence for appropriateness, testing control effectiveness, presenting control evidence to external auditors, and audit planning with external auditors.
    In-depth knowledge of security controls, interpreting control requirements for ISO 27001 (Must) and SOC II (good to have), audits, reviewing control evidence for completeness an accuracy, and ensuring evidence provided to auditors satisfies control requirements.
    Ability to of plan and lead meetings with control owners and external auditors.
    Ability to clearly define control requirements to control owners or explaining control evidence to external auditors.
    Experience planning and performing vendor security risk reviews including creation of templates and reporting for reviewing different types and categories of vendors such as cloud, vendors hosting sensitive data, and vendors with access to sensitive data.
    Experience reviewing ISO 27001, SOC 2, Pen Test, and other forms of security assessment reports.
    Manages and tracks the delivery of Security Training and Awareness campaigns.
    Assists in the development of content for Security Awareness campaigns.
    Actively contributes to the Security knowledgebase to enable internal knowledge sharing and facilitates efficient audits and questionnaire responses.
    Supports the Security Audit function by reviewing evidence submissions for accuracy and completeness, following up on audit requests, and helping to establish a continuous monitoring function.
    Manages and performs quarterly access reviews ensuring completeness and accuracy of results and consistent evidence collection.
    Supports the Risk Management function by reviewing and documenting Security exceptions and recommending appropriate actions.
    Recommends and assists in the definition and implementation of security controls in accordance with enterprise policies, standards, and procedures.

Get empowered by NTT DATA Business Solutions!

We transform. SAP® solutions into Value

NTT DATA Business Solutions is a fast-growing international IT company and one of the world’s leading SAP partners. We are a full service provider delivering everything from business consulting to implementation of SAP solutions, including hosting services and support.