Security risk analyst - Issue and policy exception

<h2><b>Career Category</b></h2>Information Systems<h2></h2><h2><b>Job Description</b></h2><p><u>ABOUT THE ROLE</u></p><p><u>Role Description:</u></p><p>We are looking for a highly skilled and motivated analyst to join the policy exception and issue management team.</p><p>The individual must be capable of working with minimal supervision after initial training.</p><p>The individual must be client focused with an eye for streamlining of process.</p><p>This role requires the ability to navigate ServiceNow ticket management and reporting.</p><p><b>Key Responsibilities</b></p><ul><li>Day to day queue management for the policy exception and issue records.</li><li>Candidate will need to be able to host weekly office hours calls for stakeholder support and the advancement of the records.</li><li>Perform initial ticket triage to ensure healthy records for further processing.</li><li>Monitor tickets and investigate the instances of delay in processing.</li><li>Escalate conditions or concerns to management and leads regularly.</li><li>Communicate in a brief manner via email/text and reliably update the associated tickets for good document practice.</li></ul><p><b>Required Qualifications</b></p><ul><li>Bachelor’s degree required (MIS, Information Systems, IT, Cybersecurity, or related field preferred).</li><li>5–8 years of experience in Governance, Risk &amp; Compliance (GRC), IT risk, information security compliance, or internal audit</li><li>Minimum 2-4&#43; years of experience in an IT ticket-based support environment.</li><li>Candidate must be proficient at Microsoft office tools such as Outlook, Excel and suite of Microsoft Tools</li><li>Strong analytical, problem-solving, and documentation skills.</li><li>Ability to communicate complex concepts to non-technical stakeholders.</li><li>Understanding security controls as they apply to GRC (Governance, Risk, and Compliance) across the enterprise.</li><li>Ability to analyze metrics and generate executive-level reporting and insights.</li><li>Adaptability to a dynamic and fast-paced environment.</li><li>Strong organizational and time management skills.</li></ul><p><b>Preferred Skills</b></p><ul><li>Experience with service now IRM module is a plus.</li><li>Experience with risk assessment methodologies and control evaluation techniques.</li><li>Proficiency at tools such as Lucid charts, Visio and PowerPoint.</li><li>Candidate must possess or develop the skills to manage a service now dashboard.</li><li>Ability to manage multiple competing priorities in parallel</li><li>Relevant certifications such as SAFe for Teams, ServiceNow, CISA, CRISC or CISSP.</li><li>Working knowledge of industry standards, controls or frameworks such as:<br /> ISO/IEC 27001 and ISO/IEC 27002.<br /> GDPR, HIPAA, SOX, PCI-DSS, NIST.</li></ul><p></p><p><u>Soft Skills:</u></p><ul><li>Ability to prioritize and handle multiple tasks effectively in a dynamic work environment.</li><li>Detail-oriented, with a strong focus on quality and accuracy.</li><li>The candidate must demonstrate fluency in English, both written and spoken. Bilingual proficiency is considered an advantage.</li><li>Must be a team player and able to work with and through others.</li><li>Be a self-starter, independent, and resourceful. Able to exercise independent judgment and act on it.</li></ul><p></p><p></p><p>Work Hours: This position operates on the second shift, from 2:00 PM to 11:00 PM IST. Candidates must be willing and able to work during these hours, including weekends and holidays, as required</p><p><span> </span></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p>.