Job Role:You will serve as an Analyst within the Allianz Risk Shield (ARS) framework. Your primary responsibility is to review and test evidence submitted by service managers against the security controls defined in the Allianz Security Policy, provide effectiveness ratings, and support issue management through to resolution.Additionally, you will contribute to the Global Portfolio Office approval activities for App1, Data privacy and AI registration, Digital integrated information risk management, Availability management support and CMDB activities. You will also support security operations activities across the division, working closely with QA leads, service managers, ARS SPOCs, and cross-functional security teams.What You Will Do:A. ARS QA Review & Evidence AssessmentReview evidence submitted by service managers for Test of Design (ToD) and Test of Effectiveness (ToE) across ARS controlsRate controls as effective or ineffective based on evidence quality and completenessIdentify common quality gaps such as generic user manuals instead of service-specific documentation, links instead of actual evidence, missing Business Owner sign-off, and missing dates/approvals/version informationValidate vendor certifications including SOC 2 Type II reports (validity within one year), ISO 27001 certificates with Statement of Applicability (SoA), ISAE 3402, and PCI-DSS certificationsAssess Shared Responsibility Templates (SRT) for SaaS applications and verify vendor/client responsibility assignments across the 57 TPRM controlsManage issue states in ServiceNow GRC (Current → Respond → Review) and support issue creation in AZT Archer within 30 days for non-compliant controlsEnsure evidence meets the 5 Ws standard (Who, What, When, Where, Why)



and references specific service names and SONB. Additional activitiesSupport Project management approval in GPO division. You will work closely with the GPO lead of App1Support data privacy and AI registrations for App1 divisionSupport CMDB topic if requiredSupport and track DIIRM process across App1 divisionSupport availability management KPI tracking across App1Support Application 1 services in various security initiatives as a security officer and across other discipline such as an Assurance SPOCExposure to AI tools is an add-on advantage.What You Bring:Technical KnowledgeSkill AreaDetailsInformation Security FundamentalsUnderstanding of ISO 27001, SOC 2, and ISAE 3402 frameworksRisk & ComplianceBasic knowledge of IT risk management and control frameworksSecurity OperationsUnderstanding of SIEM, EDR, and security monitoring principlesData privacy and AI Basic knowledge of privacy and AI toolsIT Regulatory StandardsAwareness of GDPR, IT compliance, and audit standardsTools & PlatformsComfort working with ServiceNow, SharePoint, AZT Archer, and Excel-based toolsCore Competencies:Analytical Thinking – Critically evaluate evidence against control requirements and identify gapsAttention to Detail – Precision in reviewing documentation for timestamps, approvals, sign-offs, and version informationCommunication – Clear written and verbal skills for QA recommendations,



issue documentation, and stakeholder interactionTime Management – Ability to manage 3-day testing windows per application and 2-day rework cyclesProblem-Solving – Identify root causes of evidence deficiencies and suggest actionable improvementsTeamwork – Collaborate effectively with QA leads, service managers, ARS SPOCs, and Fit-Gap teamsPreferred Certifications (Nice to Have)CompTIA Security+ISO 27001 Lead Auditor / Internal AuditorCertified Information Systems Auditor (CISA)CISSPCertified Ethical HackerSANS / GIAC certifications (e.G., GSEC, GCIH, GSNA, GEVA)Penetration testing certifications (e.G., OSCP, GIAC GPEN)ITIL FoundationAllianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.Join us. Let's care for tomorrow.

📌 Information Security Analyst_3506 (Pune)
🏢 Allianz
📍 Pune