{bc}
workday

Information Security Analyst

Fis
Pune, IND
Full-time
Mid · 3–4 years experience
Hybrid
Discovered 4 days ago

Full Job Posting

About the role

As an Analyst II, Information Security, you’ll support information security management system (ISMS), privacy, risk management and compliance activities. You’ll lead audit engagements, assess information security risks and work with stakeholders to support certification and surveillance audits. You’ll also help strengthen security processes through remediation and continuous improvement.

Your key responsibilities

Lead ISMS audit engagements in accordance with ISO/IEC 27001:2022, ISO/IEC 27701:2025 and TISAX requirements.

Identify and evaluate risks to digital information, working with stakeholders to establish and implement appropriate risk mitigation measures.

Support external certification, surveillance and client audits by coordinating evidence requests, stakeholder discussions, audit walkthroughs and management responses.

Develop, maintain and periodically review ISMS documentation, risk registers, audit reports and corrective action plans.

Prepare audit summaries, status updates, remediation trackers and management reports, while identifying opportunities to strengthen security processes and procedures.

What you bring

  • Required qualifications
  • Three to four years of hands-on experience with information security management systems, data privacy, risk management and compliance.
  • Practical experience implementing or maintaining an ISO/IEC 27001-certified ISMS, including maintaining documentation and audit evidence, reviewing controls, identifying gaps and tracking remediation.
  • Strong knowledge of ISO/IEC 27701:2025 requirements, privacy principles, the responsibilities of personally identifiable information (PII) controllers and processors, and the personal data lifecycle.
  • Knowledge of the General Data Protection Regulation (GDPR) and other applicable privacy and data protection regulations, with experience supporting certification, surveillance and recertification audits.
  • ISO/IEC 27001:2022 Lead Auditor certification.
  • Preferred qualifications
  • Exposure to SOC 1, SOC 2, PCI DSS, IT General Controls, privacy, cloud security, third-party risk management or regulatory compliance assessments.
  • CISA, CISSP, CRISC or an equivalent information security qualification.
  • The impact you’ll make
  • As an Analyst II, Information Security, you’ll be part of the Assurance and Testing function supporting a global portfolio of ISO 27001, ISO 27701, TISAX and Cyber Essentials certification activities across more than 30 locations. Your work will help maintain strong information security and privacy practices, address identified risks and support continuous improvement across the information security program.
  • What we offer you
  • When you join FIS, you become part of a team that's shaping how the world pays, banks and invests. We’re committed to helping you thrive, both professionally and personally.
  • At FIS, we offer you:
  • Internal career growth opportunities
  • A voice in the future of fintech
  • Always-on learning and development
  • Collaborative work environment
  • Opportunities to give back

Qualifications

  • Three to four years of hands-on experience with information security management systems, data privacy, risk management and compliance.
  • Practical experience implementing or maintaining an ISO/IEC 27001-certified ISMS, including maintaining documentation and audit evidence, reviewing controls, identifying gaps and tracking remediation.
  • Strong knowledge of ISO/IEC 27701:2025 requirements, privacy principles, the responsibilities of personally identifiable information (PII) controllers and processors, and the personal data lifecycle.
  • Knowledge of the General Data Protection Regulation (GDPR) and other applicable privacy and data protection regulations, with experience supporting certification, surveillance and recertification audits.
  • ISO/IEC 27001:2022 Lead Auditor certification.

Preferred Qualifications

  • Exposure to SOC 1, SOC 2, PCI DSS, IT General Controls, privacy, cloud security, third-party risk management or regulatory compliance assessments.
  • CISA, CISSP, CRISC or an equivalent information security qualification.
  • The impact you’ll make
  • As an Analyst II, Information Security, you’ll be part of the Assurance and Testing function supporting a global portfolio of ISO 27001, ISO 27701, TISAX and Cyber Essentials certification activities across more than 30 locations. Your work will help maintain strong information security and privacy practices, address identified risks and support continuous improvement across the information security program.
  • What we offer you
  • When you join FIS, you become part of a team that's shaping how the world pays, banks and invests. We’re committed to helping you thrive, both professionally and personally.
  • Internal career growth opportunities
  • A voice in the future of fintech
  • Always-on learning and development
  • Collaborative work environment
  • Opportunities to give back

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Fis