Job Description

Information Security & QMS Analyst

n

Experience: 2–5 Years | Locations: Chennai (1) | Bengaluru (1)

n

Role Overview

n

Support Information Security, Data privacy, QMS activities, including audits, contract reviews, project security assessments, in alignment with ISO 9001 and ISO 27001. This is a work-from-office role.

n

Core Responsibilities:

n

n
Audits & Assessments – Coordinate & support, external audit certification, customer audits, conduct internal audit, handle Information Security questionnaires and third-party vendor risk assessments.
n
Contracts & Privacy – Review contracts, MSAs and Information Security clauses; support implementation of PII/privacy controls in line with GDPR and India's DPDP Act.
n
Project Security – Conduct & support project security audits covering SDLC, Secure SDLC, and secure coding practices with Project& program Delivery teams.
n
QMS/ISMS – Maintain policies, procedures, standards, and records; track risks, non-conformities, corrective actions, and compliance gaps to closure.
n
Stakeholder Collaboration – Work with IT, HR, Legal, Delivery, and other stakeholders to implement, audit and maintain ISMS,



QMS & privacy controls.
n
Awareness & Reporting – Conduct Information Security awareness sessions and prepare compliance dashboards, trackers, reports, and management review inputs.
n

n

Required Skills:

n

n
2–5 years of experience in QMS, Information Security, GRC and Data Privacy.
n
Working knowledge of ISO 9001, ISO 27001:2022, and its 93 Annex A controls.
n
Implementation knowledge of ITGC/IT controls and Information security controls.
n
Experience/exposure to internal, external, and customer audits, risk assessments, third-party reviews and contract/security clause reviews.
n
Working knowledge of Secure SDLC, secure coding, GDPR & India's DPDP Act.
n
Robust communication, stakeholder coordination, analytical & documentation skills.
n

n

Preferred:

n

n
ISO 27001 / ISO 9001 Internal or Lead Auditor certification.
n
Experience working in Software programming and Information Technology related organizations.
n
Exposure to GRC, privacy, or Information Security governance.
n

📌 Information Security Analyst Tamil Nadu (India)
🏢 ACL Digital
📍 India