SIMPLIFY GROUP

Information Security Analyst

Department Compliance

Experience 2 - 4 Years

Employment Type Full-Time

Role Overview

We are looking for an Information Security Analyst with 2-4 years of hands-on experience in Governance, Risk & Compliance (GRC), information security compliance, and audit support. The ideal candidate will have practical exposure to ISO 27001:2022, SOC 2, HITRUST, risk management, security documentation, and compliance activities.

Key Responsibilities

- Support the implementation and ongoing maintenance of information security controls and processes.
- Support ISO 27001, SOC 2, HITRUST, and other information security audits and compliance assessments.
- Conduct information security and organizational risk assessments and maintain risk registers.
- Identify, document, and track risks, control gaps, and remediation actions through closure.
- Manage and maintain information security policies, procedures, standards, and compliance documentation.
- Support periodic review and updates of security policies and controls to ensure continued compliance.
- Support vendor and third-party security risk assessments and track remediation activities.




- Coordinate with internal stakeholders to collect audit evidence and ensure timely closure of compliance requirements.
- Maintain appropriate records and documentation for audits, assessments, and compliance reporting.
- Support continuous improvement of the organization's information security and GRC processes.

Required Qualifications & Skills

- 2 -4 years of experience in Information Security, GRC, IT Risk, Compliance, or a related field.
- Working knowledge of ISO 27001:2022, SOC 2, HITRUST, and information security risk management.
- Hands-on experience supporting security audits, assessments, and compliance activities.
- Experience with risk assessments, risk registers, and remediation tracking.
- Robust documentation, analytical, and organizational skills.
- Excellent written and verbal communication skills.
- Ability to collaborate effectively with cross-functional teams and stakeholders.

Preferred Qualifications

- ISO 27001 certification is preferred.
- Exposure to third-party/vendor risk management processes.
- Experience with GRC or compliance management tools.
- Experience in a SaaS, healthcare technology, or regulated industry environment is an advantage.

Simplify Group | Information Security Analyst

📌 Information Security Analyst (Pune)
🏢 Simplify Healthcare
📍 Pune