{"id":124189,"url":"https://alion.io/job/ubds-digital-information-security-analyst","title":"Information Security Analyst","company":{"id":8401,"name":"UBDS Digital","domain":"ubdsdigital.com","url":"https://alion.io/company/ubds-digital","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":94,"open_postings":8,"ghost_share":0,"stale_share":0.25,"repost_share":0,"time_to_fill_p50_days":23,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chennai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14000,"max_usd":34000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false},{"name":"NIST 800-53","optional":true},{"name":"NIST CSF","optional":true},{"name":"OWASP","optional":true}],"status":"live","first_seen_at":"2026-08-25T23:39:10Z","employer_posted_date":null,"last_verified_at":"2026-08-25T23:39:10Z","board_verified":false,"closed_at":null,"days_open":53,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":53},"description":"Responsibilities:\nSupport the operation and continuous improvement of the Information Security Management System, ISO 27001 and SOC 2-style controls, and customer/internal compliance requirements.\nMaintain security policies, standards, control documentation, and compliance trackers; translate customer contracts and security addenda into internal controls.\nCoordinate audit evidence collection for internal, external, surveillance, and customer-led audits; track findings and remediation through closure.\nSupport periodic risk assessments and help maintain the enterprise risk register.\nTrack key security metrics (vulnerability remediation, training completion, vendor risk, and compliance maturity) and prepare updates for leadership and Security Council reviews.\nSupport responses to customer security questionnaires, RFP/RFI security sections, and due-diligence requests; coordinate customer audits and walkthroughs.\nExecute third-party risk management vendor due-diligence reviews, risk ratings, remediation tracking, and periodic reassessments of critical vendors.\nCoordinate security awareness initiatives, including onboarding and refresher training, phishing simulations, and role-based awareness content.\nMaintain audit-ready documentation and identify opportunities to automate evidence collection, compliance tracking, and reporting workflows.\nRequirements:\n3-4 years of experience in information security, GRC, IT risk, compliance, audit, or related roles.\nHands-on experience with ISO 27001 SOC 2-style controls, internal/external audits, and customer security assessments.\nExperience performing or supporting security audits, IT risk assessments, or control testing; a Big 4 or similar audit/advisory background is a strong fit.\nExperience in vendor risk management, third-party due diligence, and contract security reviews.\nAbility to respond to customer security questionnaires, RFP/RFI security sections, and due diligence requests.\nGood understanding of access control, vulnerability management, secure SDLC, incident management, data protection, and cloud security.\nStrong documentation, coordination, and follow-up skills; comfortable working across engineering, product, DevOps, IT, HR, procurement, legal, and customer success.\nStrong ownership mindset, able to drive tasks to closure without frequent follow-up\nPreferred Qualifications:\nCertifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISA, CISM, CRISC, Security+, or CISSP.\nExperience working in SaaS, fintech, AI/technology, financial services, or customer-audited environments.\nFamiliarity with frameworks such as NIST CSF, NIST 800-53 CIS Controls, ISO 27001 Annex A, OWASP, and cloud security benchmarks.\nExperience using GRC platforms, ticketing tools, document repositories, vendor risk tools, and dashboard/reporting tools.\nCertifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISA, CISM, CRISC, Security+, or CISSP.\nExperience working in SaaS, fintech, AI/technology, financial services, or customer-audited environments.\nFamiliarity with frameworks such as NIST CSF, NIST 800-53 CIS Controls, ISO 27001 Annex A, OWASP, and cloud security benchmarks.\nExperience using GRC platforms, ticketing tools, document repositories, vendor risk tools, and dashboard/reporting tools.","description_format":"text","description_chars":3305,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Security Operations"],"lifecycle":[{"event":"open","at":"2026-08-25T23:39:10Z"}],"visa":[],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.466,"p_room":0.35,"age_days":52,"expected_fill_days":23,"reasons":["seen:52","velocity","win:tail"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/ubds-digital-information-security-analyst","json_url":"https://alion.io/job/ubds-digital-information-security-analyst.json","meta":{"generated_at":"2026-10-18T00:45:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1312,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8401},"rest":"https://alion.io/mcp/rest/get_company?id=8401"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fubds-digital-information-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fubds-digital-information-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fubds-digital-information-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ubds-digital-information-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fubds-digital-information-security-analyst"}]}