Job highlights

- Proven ability to influence outcomes and drive remediation across federated teams without relying on direct authority. . Professional information security,audit,or risk certifications (e.g.,CISA,CRISC,CISSP,CISM,or ISO 27001 Lead Auditor) are highly preferred.
- Bachelor s degree in Computer Science,Cybersecurity,Information Systems,Business Administration,or a related field

Job Summary As Take-Two continues to operate across a complex, federated environment spanning Corporate, Rockstar, 2K, and Zynga, demonstrating that our security controls are appropriately designed, implemented, and operating effectively is increasingly important. That's where you come in. We are seeking an experienced Senior Information Security Assurance Analyst to help mature and scale our security assurance program.

In this high-impact, consultative role, you will independently lead security audits, assessments, and control reviews across our Labels; evaluate technical evidence and control effectiveness; identify systemic gaps and drive remediation; and translate security requirements and findings into practical, risk-informed guidance. You will partner closely with Security Engineering and Platform teams to improve workflows and automate evidence collection and continuous control monitoring, while serving as a trusted advisor to security, technology, engineering, and business stakeholders. You will also provide functional guidance and mentorship to other members of the team, helping establish consistent, scalable assurance practices across T2.

Responsibilities

- Independently lead label, studio, and enterprise security audits, assessments, and control reviews from planning and scoping through testing, findings, remediation, and closure.
- Evaluate control design, implementation, operating effectiveness, and technical evidence using a risk-based assurance approach.
- Identify control deficiencies and systemic weaknesses, assess business and security impact, and develop actionable remediation recommendations.
- Independently validate remediation and compensating controls before closing identified findings.




- Serve as a key operational lead for internal, external, partner, and regulatory audits and assessments, ensuring evidence is complete, relevant, and sufficient.
- Translate regulatory, contractual, and internal security requirements into practical control expectations and assurance activities.
- Maintain and continuously improve the enterprise security control framework and its alignment to standards such as NIST CSF, CIS Controls, PCI DSS, and other applicable requirements.
- Drive continuous assurance initiatives that move the organization beyond point-in-time compliance toward repeatable and ongoing control validation.
- Partner with Security Engineering and Platform teams to streamline evidence collection, reduce manual audit effort, and automate control monitoring and assurance workflows.
- Lead high-level discussions with Label and business stakeholders to communicate control deficiencies, navigate competing priorities, and drive risk-informed remediation decisions.
- Provide clear, evidence-based reporting to Information Security leadership on control effectiveness, systemic weaknesses, remediation progress, and emerging assurance risks.
- Provide subject-matter guidance, mentoring, and peer review to other GRC team members to improve the consistency and quality of assurance activities.
- Identify opportunities to standardize, automate, and continuously improve assurance methodologies, processes, and reporting across T2 and its Labels.

Requirements

- Minimum of 5 years of progressive experience in Information Security Assurance, IT Audit, GRC, Security Compliance, or a related control assessment function, preferably within a large-scale, decentralized, or federated environment.




- Proven experience independently planning and executing security audits, assessments, or control reviews, including evaluating control design, implementation, operating effectiveness, and supporting evidence.
- Strong understanding of information security control frameworks and standards, including NIST CSF, CIS Controls, and relevant regulatory or contractual requirements.
- Demonstrated ability to identify control deficiencies, assess risk and business impact, develop remediation recommendations, and validate corrective actions.
- Experience translating technical security findings and control requirements into transparent, actionable guidance for technical and non-technical stakeholders.
- Experience working with GRC, workflow, evidence management, and ticketing platforms such as ServiceNow and Jira; experience with ServiceNow GRC/AVR is a plus.
- Demonstrated ability to lead complex initiatives, manage competing priorities, and operate independently with limited managerial oversight.
- Robust analytical and critical-thinking skills, with the ability to challenge insufficient evidence and make defensible, risk-based judgments.
- Exceptional written and verbal communication skills, including the ability to communicate effectively with senior security, technology, engineering, and business stakeholders.
- Proven ability to influence outcomes and drive remediation across federated teams without relying on direct authority.
- Qualified information security, audit, or risk certifications (e.g., CISA, CRISC, CISSP, CISM, or ISO 27001 Lead Auditor) are highly preferred.
- Bachelor s degree in Computer Science, Cybersecurity, Information Systems, Business Administration, or a related field; equivalent professional experience will also be considered.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Sr Information Security Assurance Analyst (Bengaluru)
🏢 take2
📍 Bengaluru