? Gujarat, India | Full-time

Information Security | GRC | ISO 27001 | ISMS | IAM | GCP | Access Governance | Security Controls | Security Compliance

ROLE

Script Assist is looking for a hands-on Information Security & GRC Analyst to help operate and continuously improve the information-security controls behind a live SaaS healthcare technology platform.

We are looking for someone with practical experience across information security, GRC, ISO 27001, IAM, access governance, security controls and cloud security controls, ideally within a SaaS, software, healthcare, fintech or other regulated technology environment.

Around 3-4 years of relevant experience would be ideal, although we care much more about what you have personally owned and operated than your exact number of years.

WHAT YOU WILL OWN - INFORMATION SECURITY CONTROLS

- Maintain and operate information-security controls.
- Monitor whether controls are working as intended.
- Identify control gaps and track remediation.
- Maintain evidence that controls have operated.
- Work with technical and business teams to resolve control weaknesses.
- Ensure documented controls match operational reality.

IDENTITY & ACCESS MANAGEMENT

- Identity and access management.
- User provisioning and deprovisioning.
- Joiner, mover and leaver processes.
- Role-based access control and least privilege.
- Privileged and administrative access.
- Periodic user-access reviews and access recertification.
- Dormant and unnecessary account removal.
- MFA and authentication controls.
- Access exceptions and remediation.

GCP SECURITY CONTROLS

Google Cloud Platform is at the core of Script Assist's production infrastructure. You will work with our technical team to help operate and evidence security controls across GCP, including:

- GCP Identity and Access Management.
- Roles and permissions.
- Privileged access.
- Least privilege.
- Service accounts.
- Authentication and MFA.
- Access reviews.
- Audit logging and monitoring.
- Security configuration.
- Vulnerability and security findings.
- Remediation tracking.




- Evidence that cloud-security controls are operating effectively.

You need enough practical understanding of cloud environments to review controls, identify inappropriate access or gaps, work effectively with engineers and follow issues through to resolution

.

ISO 27001 / ISMS

- ISO 27001 controls and ISMS documentation.
- Policies and procedures.
- Control owners and control evidence.
- Risk assessments and risk treatment.
- Internal control reviews.
- Audit preparation and audit findings.
- Corrective actions and continual improvement.

POLICIES, AUDIT & REMEDIATION

- Manage periodic policy reviews and approvals.
- Keep policies aligned with actual operational practice.
- Maintain security-control evidence and support audits.
- Track findings and corrective actions to closure.
- Support third-party security reviews, vulnerability remediation, penetration-test remediation, security questionnaires, security incidents and security awareness activities.

WHAT WE ARE LOOKING FOR

Ideally 2-5 years of relevant experience, with approximately 3-4 years particularly suitable.

Practical experience in several of the following: Information Security, InfoSec, GRC, ISO 27001, ISMS, information-security controls, security compliance, IAM, user-access reviews, access governance, RBAC, least privilege, joiner/mover/leaver controls, GCP / Google Cloud Platform, cloud-security controls, security policies and procedures, audit evidence, control testing, risk management, remediation tracking and third-party risk management.

Most importantly, we want someone who has personally operated security controls and can explain exactly what they did, how the control worked, what evidence was retained and what happened when something went wrong.

ABOUT SCRIPT ASSIST

Script Assist provides technology and operating infrastructure for private clinical services in the UK. Our SaaS platform supports live healthcare operations across clinics, clinicians and pharmacies. Information security, access control, cloud security, data protection, auditability and robust operational controls are fundamental to how we operate.

📌 Information Security & GRC Analyst | ISO 27001, IAM & GCP (Ahmedabad)
🏢 Script Assist
📍 Ahmedabad