Infosec Analyst

Leegality is seeking an Information Security Analyst to join our team. This is a remote position. We specialize in helping large Indian businesses digitally transform critical compliance processes in a fast, easy, and secure manner. Our offerings include a Document Infrastructure suite with products like Document Execution Workflow (used by 2,000+ businesses including HDFC and SBI Cards), Contract Management (AI-powered), and Signstation. We also provide Consent Infrastructure with Consentin for DPDP and Privacy compliance, and Consentin Lens for data discovery.

As an Information Security Analyst, you will be instrumental in managing third-party risk, supporting ISMS activities, and safeguarding our systems and assets against threats. Leegality is an ISO 27001 certified company, and at Leegality, you will gain extensive exposure to regulatory compliance, implement leading security practices, and rapidly advance your security domain knowledge. You will report directly to Information Management.

Key Responsibilities:

• Understand Leegality's product suite and features.
• Manage client security assessment questionnaires and Information Security Assurance Requests from end-to-end.
• Maintain and update security evidence periodically.
• Collaborate with internal teams to develop work program timelines, conduct risk assessments, and create planning documents.
• Perform vendor risk management, including evaluating the security posture of potential service providers before onboarding.
• Assist the Infosec team in the maintenance of the Information Security Management System (ISMS).
• Ensure technology and information risks are identified, assessed, controlled, managed, reported, and that assurance actions are closed promptly.
• Aid in deploying effective information systems, resources, and controls to maximize efficiency and minimize risk.
• Apply a strong understanding of complex information systems, project management, and current technology to enhance deliverables.
• Build relationships with stakeholders to drive continuous improvement in Technology Risk and Project governance.
• Ensure business continuity, disaster recovery, and stress testing controls are defined, documented, and regularly executed.
• Support the InfoSec team in managing the organization's Operational Risk Assurance & Controls Testing Plan.
• Assist the Information Security Manager with daily compliance activities to maintain ISO 27001:2022, ISO 27017, ISO 27018, ISO 22301 certifications, and SOC 2 Type 2 compliancy.
• Develop clear protocols, communicate potential risk issues to management, and relay policy changes effectively.

Desired Skills and Experience:

• A minimum of 3 to 4 years of experience in the core Information Security domain, with a preference for experience in BFSI or B2B IT sectors.
• Certifications such as ISO 27001 LA, CISA, or CISSP are advantageous.
• Hands-on experience with various external and client InfoSec audits.
• We value strong communication skills, a collaborative and positive attitude, and a professional demeanor, particularly in contributing to a healthy internal culture.

Our hiring process includes AI-powered evaluations and structured interviews for a fair experience. You will be contacted via email for next steps, which may include assessments, AI-enabled interviews, and in-person interviews. Final selection and compensation depend on your overall performance and experience.

Learn more about our impact: leegality.com/case-studies

Our Culture: https://bit.ly/3Iqm5SB

Visit our website: www.leegality.com

Follow us on LinkedIn: www.linkedin.com/company/leegality/