Jr Information Security Analyst

About the Role

We are seeking an experienced Information Security Analyst to lead and strengthen our Information Security function across LATAM operations. This role will be responsible for ensuring the implementation of security standards, regulatory compliance, risk management, security awareness, audit coordination, and incident response across multiple locations.

The successful candidate will act as a trusted security advisor to business, delivery, and support teams, ensuring information security is embedded into day-to-day operations.

Key Responsibilities

• Drive the implementation and adherence to corporate Information Security policies, standards, and procedures across LATAM locations.
• Ensure compliance with ISO 27001:2022 Information Security Management System requirements.
• Deliver security awareness programs, training sessions, and compliance campaigns for all employees.
• Ensure risk assessments are conducted and maintained by delivery and support teams.
• Manage information security incidents from identification through investigation, evidence collection, reporting, remediation, and closure.
• Conduct physical security assessments and work area reviews for new client engagements and operational setups.
• Monitor and ensure compliance with system and network security requirements.
• Support compliance with international regulations and industry standards, including:
• PCI DSS
• GLBA
• HIPAA
• Data Protection Regulations
• Other applicable legal and regulatory requirements
• Prepare and present monthly security metrics and reports to senior leadership.
• Plan and execute internal security audits.
• Support client, certification, and external audits.
• Conduct third-party and vendor security assessments as required.
• Partner with business stakeholders to continuously improve the organization's security posture.

Required Qualifications

• Bachelor's Degree or Diploma in:
• Information Technology
• Computer Science
• Cybersecurity
• Related Engineering disciplines
• Minimum 2-4 years of experience in Information Security, Governance, Risk, and Compliance (GRC), Audit, or related functions.
• Experience working with ISO 27001:2022 frameworks and controls.
• Advanced English communication skills, both written and verbal.

Required Knowledge & Experience

• Strong understanding of Information Security principles and best practices.
• Knowledge of IT infrastructure, networks, and security controls.
• Experience managing security incidents and risk assessments.
• Experience supporting internal and external audits.
• Understanding of regulatory and compliance requirements, such as:
• HIPAA
• PCI DSS
• GLBA
• Data Protection regulations
• Other international compliance frameworks

Preferred Certifications

Candidates holding one or more of the following certifications will be highly preferred:

• CISSP (Certified Information Systems Security Professional)
• CISA (Certified Information Systems Auditor)
• CISM (Certified Information Security Manager)
• ISO 27001 Lead Auditor
• ISO 27001 Lead Implementer

Key Competencies

• Excellent verbal and written communication skills
• Strong analytical and problem-solving abilities
• Report writing and documentation expertise
• Detail-oriented and process-driven mindset
• Strong stakeholder management and interpersonal skills
• Self-motivated with the ability to work independently
• Adaptability and willingness to embrace new challenges
• High level of integrity and professionalism

Other Considerations

Tata Consultancy Services is an equal opportunity employer, our commitment to diversity & inclusion drives our efforts to provide equal opportunity to all candidates who meet our required knowledge & competency needs, irrespective of any socio-economic background, race, color, national origin, religion, sex, gender identity/expression , age, marital status, disability, sexual orientation or any others.