Staff Information Security Analyst

About the role

Staff Information Security Analyst – Security Assurance at Druva drives trust in data security, privacy, and compliance for prospects and customers. The role leads third‑party risk management, orchestrates security and compliance due diligence, and advances phishing and security awareness initiatives. Pune, India, on‑site with full‑time commitment.

What you’ll do

• Own and drive security and compliance due diligence processes
• Coordinate with Cyber Defence, Product Security, Compliance, Engineering, Legal, and customer teams
• Manage security support requests and questionnaires
• Develop and maintain customer‑facing security policies and documentation
• Lead third‑party risk management strategy and assessments
• Execute phishing simulation and security training initiatives

What you’ll bring

• 10+ years in technology
• 6+ years in cyber security
• Experience with AWS/Azure security controls
• Knowledge of MITRE ATT&CK, OWASP Top‑10
• Familiarity with SOC 2, ISO27001, NIST CSF
• TPRM platform experience (e.g., ServiceNow, CyberGRX)
• Strong communication and ownership bias
• Threat modeling and risk assessment skills

Skills

Benefits

• Strong NPS and customer trust focus
• Leadership in cyber resilience
• Collaborative cross‑functional teams
• Experience with TPRM tools
• Automated workflow expertise