Security Analyst

Job Title: Security Analyst

Location: Pune (Hybrid - 3days in a week at office, 2 days wfh, Candidate needs to report to only Pune office) (Relocation is considerable)

Shift Timings: 1-10PM IST

Interview: 2 rounds

Position: 1

Overall – 7+ years

Relevant – 5+ years

Considerable Notice Period: 30 days

Project Overview:

We are seeking Data Protection Discovery Analysts to join their fast paced, Data Protection team. Within this dynamic environment, the DSA have a range of core responsibilities to protect highly sensitive data and Personally Identifiable Information (PII).

Role:

Operational Duties

• Collaborate with IT, legal, data governance and compliance teams to ensure data protection strategies are integrated into daily operations and technology systems.

• Support incident response teams in investigating data breaches or violations, assessing impacts, and recommending remediation actions.

• Conduct regular audits of data handling practices and manage data subject access requests (SARs), ensuring timely and accurate responses.

• Develop, implement, and maintain data protection policies and procedures, ensuring they align with best practice, legal and regulatory requirements.

• Provide training and awareness programs to employees on data protection standards, privacy regulations, and best practices.

• Monitor and analyse data discovery alerts, incidents, and events to detect potential risks, breaches, or violations of data security policies.

• Maintain and update Discovery policies based on emerging threats, data handling practices, and business needs.

• Conduct data risk assessments to identify vulnerabilities in systems, processes, and technologies.

• Implement and configure Discovery tools to identify, classify, and protect sensitive data, ensuring compliance with relevant regulations (e.g., GDPR, GLBA, FED, PCI-DSS).

• Provide regular reporting and analysis on metrics, incidents, and overall data security posture.

• Train and raise awareness among employees on data protection policies and how to recognize and prevent potential data loss scenarios.

• Perform regular audits and assessments of data protection systems to ensure the effectiveness of Discovery controls.

• Assist in the development of incident response procedures related to data loss and support remediation efforts during security incidents.

• Experience of data analysis, reporting root-cause issues, trends, and anomalies

Experience Level: Level 2

Certification:

Qualifications>Any Graduate also CISSP or CISM or CEH

Must Have Skills:

• Information Technology experience with a strong focus on Data Protection, Cyber Security and Application-level security.

• An In-depth understanding of information security, cyber security, and Information Technology Service Operations (ITIL/NIST/ISO 27000/CISSP)

• A self-starter, operating independently, able to accomplish objectives in a dynamic environment.

• Excellent stakeholder management

• Acting Subject Matter Expert, providing on-point, in-depth consulting and direction to team and partners.

• An in-depth understanding of data analysis / analytics including a proficiency with SQL, KQL or EQL.

• Excellent oral and written communication skills are required.

• Strong analytical, organisational, and problem-solving skills are required.