Senior Information Security Analyst

About the Company :

ARAs Client is a fast-growing enterprise B2B SaaS startup founded by ex-Amazon ad-tech experts. Headquartered in Pune, India, ARAs Client is building a future-proof Retail Media Operating System, helping retailers boost profitability by up to 7% of sales. By offering omni-channel media buying, advanced targeting, analytics, and superior ROAS, the platform enables retailers and marketplaces worldwide to stay ahead of the market by at least two years.

The Role :

As a Senior Security Analyst, you will take a leading role in safeguarding our digital infrastructure and ensuring our systems are future-proof against potential threats. You'll dive deep into all aspects of security, from managing our VPC and firewall configurations to detecting and mitigating fraudulent traffic. This role is crucial for setting up, maintaining, and evolving our security frameworks to keep pace with industry advancements and regulatory requirements.

Key Responsibilities :

- Develop and enforce policies and procedures to ensure the protection of IT infrastructure and data.

- Lead compliance activities related to SOC 2, ISO 27001, GDPR, and CCPA.

- Analyze and improve existing security systems and propose strategic solutions for long-term security improvements.

- Conduct security assessments and audits, and manage remediation plans.

- Collaborate with IT and development teams to integrate security measures into network architectures and cloud services.

- Monitor security vulnerabilities and threat intelligence to anticipate and mitigate potential threats.

- Manage incident response

Skills Required :

- Minimum of 3 years of experience in a cybersecurity role with hands-on experience in compliance and operational security.

- Mandatory Skills : Cybersecurity, Compliance, Intrusion Detection, Data Protection, Cloud Security

- Strong understanding of network security, VPC management, firewalls, and intrusion detection systems.

- Proven track record in handling SOC 2, ISO 27001, GDPR, and CCPA compliance.

- Certifications such as CISSP, CISM, or similar will be highly regarded.

Qualifications & Experience :

- 3-6 years

- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.