These are operational analyst not senior advisory or architecture roles.Candidates must be comfortable working directly with data, systems, control queues,platform and system owners, business teams, stakeholders, and employees to resolve issues and improve outcomes.Key responsibilities SharePoint access reviews: Review site ownership, membership, permissions, and external access; identify excessive, inappropriate, stale, or unexplained access; and track remediation or approved exceptions.

BigID classifier assurance: Validate classifications and classifiers, investigate false positives, false negatives, and coverage gaps, and support tuning, testing, and improvement.

ServiceNow attestations: Monitor completion, overdue actions, response quality, and evidence; follow up with owners and remediate inappropriate access.

Analysis and remediation: Identify discrepancies, exceptions, trends, control weaknesses, and risks across data sources. Agree and track access removal, ownership updates, classification changes, and overdue attestations.Reporting and escalation: Report control completion, exceptions, remediation progress, risk themes, trends, andescalations accurately.

Queries and evidence: Manage mailbox and stakeholder queries, provide clear guidance, maintain audit-ready records of activities,



decisions, communications, exceptions, and approvals, and update procedures, templates, guidance, and runbooks. Continuous improvement:Improve data quality, reporting, control efficiency, automation, user guidance, and overall control effectiveness. Desirable skills and experience Operational experience in data protection, information security, access governance, data governance, technology risk, control assurance, or a comparable environment.

Strong analytical skills to reconcile multiple sources, validate outputs, identify discrepancies and trends, and convert findings into practical actions. Proficiency with Excel, Power BI, or equivalent tools for dashboards, management information, and trend reporting. Understanding of risks from excessive access, stale permissions, external sharing, unclear ownership,inconsistent classification, and incomplete attestations.

Clear written and verbal communication across technical teams, business stakeholders, owners, managers, and employees. Robust attention to detail, organisation, persistence, evidence management, appropriate escalation, and willingness to learn evolving platforms, processes, and data-protection concepts.

📌 Lead Software Engineer (Chennai)
🏢 Virtusa
📍 Chennai