
Senior Security Analyst
- Mumbai, Maharashtra
- Permanent
- Full-time
- Execute third-party due diligence assessments.
- Manage assessment activities with internal business stakeholders and vendors.
- Provide ongoing KPIs.
- Create and maintain documentation related to the planning, execution, reporting of assessments, correspondence, findings, and remediation plans in TWDC systems.
- Evaluate internal control design and operating effectiveness testing.
- Review Service Organization Controls (SOC) report for key vendors.
- Support ISO27001 / K-ISMS via risk assessment and consulting with control/process owners on remediation and monitoring.
- Support PCI DSS through annual QSA audit management.
- Perform ad-hoc customized control risk assessments to analyze information security and compliance risks. Collaborate with various process/control owners to plan, execute, and report assessment results, including documentation and monitoring of treatment and mitigation measures.