GRC Security Analyst India

About Acquia:

Acquia is the open source digital experience company. We provide the world's most ambitious brands with technology (built around Drupal) that allows them to embrace innovation and create customer moments that matter. At Acquia, we believe in the power of community and collaboration - giving our customers the freedom to build tomorrow on their terms. Headquartered in Boston, Massachusetts, U.S., with offices throughout the US and in Canada, the United Kingdom, Australia, and India, we have been named as one of North America’s fastest growing software companies as reported by Deloitte and Inc. Magazine, and have been rated a leader by the analyst community and named one of the Best Places to Work by the Boston Business Journal. We are Acquia. We are building for the future of the web, and we want you to be a part of it.

Position Overview:

As Acquia continues to grow, we continue to invest in information security and our Governance, Risk & Compliance (GRC) team is seeking an Information Security Analyst to work in our Pune office. As a member of the GRC team you will be responsible for all aspects of compliance and information security risk management.

Responsibilities include, but are not limited to:

• Collaborate with other departments to ensure security controls are implemented by design and by default.
• Assist with the creation and maintenance of security procedures, processes, policies, and standards.
• Support vendor risk assessments, project risk assessments, change request risk assessment, business impact assessment, annual enterprise risk assessments, and vulnerability and penetration testing.
• Support internal and external audit processes for relevant compliance certifications or contractual obligations
• Participate in disaster recovery (DR) and business continuity (BCP) exercises.
• Perform period gap assessments to validate compliance on an ongoing basis.
• Support sales team by completing customer security questionnaires
• Partner with other security teams within Acquia

Minimum Qualifications:

• 3-5 years prior experience working on an information security team
• CISSP, CISM, Security+ or similar information security certifications
• Experience with compliance standards such as ISO 27001/27002, NIST, ITIL, PCI, HIPPA, FISMA
• Familiar with AWS and GCP
• Familiar with endpoint security such as Antivirus, host IDS, and encryption
• Familiar with vulnerability scanning tools such as Nessus, Qualys or Rapid7
• Familiar with risk management methodologies
• Must be dependable, reliable, and able to work independently or as a member of a team
• Strong problem-solving abilities, initiative, and ability to thrive under pressure
• Excellent interpersonal and communication skills