Data Security Analyst Engineer

By clicking the “Apply” button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Takeda’s Privacy Notice and Terms of Use.  I further attest that all information I submit in my employment application is true to the best of my knowledge. Job Description The Future Begins Here At Takeda, we are leading digital evolution and global transformation. By building innovative solutions and future-ready capabilities, we are meeting the needs of patients, our people, and the planet. Bengaluru, the city, which is India’s epicenter of Innovation, has been selected to be home to Takeda’s recently launched Innovation Capability Center. We invite you to join our digital transformation journey. In this role, you will have the opportunity to boost your skills and become the heart of an innovative engine that is contributing to global impact and improvement.  At Takeda’s ICC we Unite in Diversity Takeda is committed to creating an inclusive and collaborative workplace, where individuals are recognized for their backgrounds and the abilities they bring to our company. We are continuously improving our collaborators’ journey in Takeda, and we welcome applications from all qualified candidates. Here, you will feel welcomed, respected, and valued as an important contributor to our diverse team. About the Role: The Data Security Analyst Engineer enables and operates the Enterprise Data Security, Access, and Privacy ecosystem by improving the security, reliability, and scalability of our Data Security & Access platforms and services. The role implements and automates policy enforcement and governance-aligned access patterns, proactively identifies and resolves security and availability issues, supports incident response and root-cause analysis, and partners with architecture, governance, and risk/compliance teams to meet global requirements as the business evolves (including GenAI/ML (including agentic AI) use cases). How you will Contribute: Lead onboarding of enterprise data platforms into the Data Security, Access & Governance ecosystem from intake through go-live, including discovery/classification, policy enforcement, logging, and reporting. Create, deploy, and maintain data access policies and controls (RBAC/ABAC/PBAC), including reviews/approvals, versioning, and documented exceptions. Provide standard policy templates and guidance for common access needs (users, services, analytics, and GenAI/ML/Agentic-AI workloads), and publish runbooks for teams to follow. Automate Data Security platform deployments using DevSecOps practices (IaC, CI/CD, automated tests, and policy-as-code) to reduce manual work and increase consistency. Keep Data Security & Access platforms healthy and available by monitoring, responding to alerts, planning capacity, and completing patching and upgrades. Support and lead incident response for Data Security & Access services, complete root-cause analysis, and drive fixes to prevent repeat issues. Work with architecture and engineering teams to identify gaps and improve platform security (authentication/authorization, least privilege, auditability, and encryption/tokenization integrations). Partner with governance teams to define and improve data identification, classification, and tagging, and ensure tags/labels flow into enforcement tools. Coordinate global policy enforcement and provide audit evidence to meet security standards and regional regulations. Create and maintain runbooks, SOPs, and knowledge articles, and help partner teams adopt the platforms through guidance and enablement. Skills and Qualifications: BS in Computer Science or related field, or equivalent work experience Minimum 3+ year of relevant experience in a deep technical role using the following essential qualifications.  Programming Skills: Proficiency in languages such as Python for integrations, automations, and policy/platform tooling (e.g., APIs, scripts, and CI/CD automation) AWS DevSecOps: Strong proficiency and knowledge of AWS Services and DevSecOps Pratice.  Identity & Access: General knowledge of Identity and Access Management Principles (AD, SSO, MFA, IAM, PIM, CIAM) Database / Data Platform Troubleshooting: Working knowledge of SQL and NoSQL technologies to query, validate access, and troubleshoot issues during investigations and incident response. Big Data Technologies: Familiarity with cloud data platforms and distributed systems (e.g., Databricks) especially on AWS, including how access is provisioned and governed in these environments. Data Modeling and Architecture: Understanding of data schemas, warehousing/lakehouse concepts, ETL/ELT and streaming patterns to design and enforce secure-by-default access controls and policy templates across data platforms. Analytical and Problem-Solving Skills: Capability to perform root cause analysis, etc Operational Ownership: Experience supporting production services including monitoring/alerting, SLO-driven reliability, on-call rotations, incident management, and post-incident root cause analysis. Machine Learning and GenAI @Scale / Agentic AI: Understanding of common GenAI/ML data access patterns and associated security risks/controls (e.g., least privilege, sensitive data handling, and auditability). (nice to have) Data Security: Knowledge of data security practice, including encryption, anonymization, tokenization, Data Security Posture Management to protect sensitive information Data Governance and Compliance: Understanding of data privacy laws and regulations, such as GDPR and HIPAA, and how to implement policies to ensure compliance. Access Control Mechanisms: Proficiency in implementing role-based access control (RBAC) and attribute-based access control (ABAC) to manage data access permissions using fine-grained policy (PBAC) (nice to have) Data Discovery and Classification: Ability to use tools for automated data discovery and classification to identify and categorize sensitive data. Policy Management: Skills in creating and managing data access policies that can be dynamically en-forced across different environments. Monitoring and Auditing: Capability to monitor data access and usage and perform audits to ensure compliance with data governance policies. Collaboration and Communication: Strong communication skills to work with data stewards, compliance officers, and other stakeholders to ensure data governance objectives are met. Microsoft SharePoint, Onedrive, and other Microsoft data estate classification and tagging. An understanding of the Agile SDLC methodology Excellent written and verbal communication skills in English Preferred Qualifications Experience implementing data security and access solutions in the healthcare and/or pharmaceutical industry Experience with DevSecOps practices Experience with Identity and Access Management (IAM) (AWS + Azure) Experience with Microsoft Entra ID, SailPoint, and Okta Experience with tokenization and data clean rooms (strongly preferred) Experience with Kubernetes, including AWS EKS (preferred) Experience with Informatica IDMC (preferred) Exposure to data classification and data taxonomy (e.g., PII, PHI). Experience with Immuta, Privacera, Cyral, and/or hyperscale-native data security controls (strongly preferred) Experience with the Microsoft Entra Suite (e.g., Entra ID Governance, Entra platform capabilities, Identity Center), Microsoft 365 Purview, and Microsoft Sentinel (strongly preferred) Experience with Databricks Unity Catalog or Informatica Catalog Experience with the Pharma Industry Platform Qualification Process Experience with ServiceNow Service Catalog Authoring Experience with Terraform System administration skills Demonstrated teamwork, collaboration, and resourcefulness Self-driven, with the ability to move work forward in the face of ambiguity and incomplete information Strong sense of ownership, urgency, and drive. WHAT TAKEDA ICC INDIA CAN OFFER YOU: Takeda is certified as a Top Employer, not only in India, but also globally. No investment we make pay greater dividends than taking diligent care of our people. At Takeda, you take the lead on building and shaping your own career. Joining the ICC in Bengaluru will give you access to high-end technology, continuous training, and a diverse and inclusive network of colleagues who will support your career growth.   BENEFITS: It is our priority to provide competitive compensation and a benefit package that bridges your personal life with your professional career. Amongst our benefits are: Competitive Salary + Performance Annual Bonus Flexible work environment, including hybrid working Comprehensive Healthcare Insurance Plans for self, spouse, and children Group Term Life Insurance and Group Accident Insurance programs Health & Wellness programs include annual health screenings and weekly health sessions for employees. Employee Assistance Program 5 days of leave every year for Voluntary Service in addition to Humanitarian Leaves Broad Variety of Learning Platforms  Diversity, Equity, and Inclusion Programs No Meeting Days Reimbursements – Home Internet & Mobile Phone Employee Referral Program Leaves – Paternity Leave (4 Weeks), Maternity Leave (up to 26 weeks), Bereavement Leave (5 days) ABOUT ICC IN TAKEDA: Takeda is leading a digital revolution. We are not just transforming our company; we are improving the lives of millions of patients who rely on our medicines every day. As an organization, we are committed to our cloud-driven business transformation and believe the ICCs are the catalysts of change for our global organization. #Li-Hybrid Locations IND - Bengaluru Worker Type Employee Worker Sub-Type Regular Time Type Full time