Staff Information Security Analyst - Security Assurance
About Druva
Druva is the resilience foundation for the AI enterprise, helping organizations secure and recover from connected risk across data, cyber, identity, and AI. The Resilience Cloud is a fully managed, cloud-native SaaS platform that delivers air-gapped and immutable protection across cloud, SaaS, on-premises, endpoint, and edge environments. Powered by Dru MetaGraph, Druva’s graph-powered intelligence layer, the platform connects critical business context so customers can understand risk, respond faster, recover cleanly, and govern data with greater confidence.
Trusted by nearly 7,500 customers, including 75 of the Fortune 500, Druva helps safeguard the critical information and systems businesses depend on in an increasingly connected world.
Visit druva.com and follow us on LinkedIn, X and Facebook.
Summary:-
The Staff Technical Security Analyst, Security Assurance will be responsible for all activities directed at building trust and confidence in Druva’s data security, privacy, and compliance posture with prospects and customers.
Additionally, they will be responsible for Druva’s Third-Party Risk Management program and drive execution and improvement in Druva’s security culture improvement initiatives around phishing and security awareness.
Preferred Qualifications/Skills:-
- Exceptional communication skills, critical thinking ability and strong bias for ownership & learning
- Working protocol level understanding of At-Rest and In-Motion Encryption fundamentals (TLS/SSL, BCrypt, PKI, SHA1, AES etc) and Key Management principles
- Demostrable knowledge of MITRE ATT@CK framework, OWASP Top-10 Web Application Vulnerabilities and related risks and countermeasures
- Knowledge of AWS, Azure services and security controls native to them
- Technical Understanding of SaaS Multi-tenant architectures
- Knowledge of technical domains such as network security, cloud security & application security
- Ability to threat model and assess security risk of interconnected systems and data flows
- Background in or strong understanding of security compliance and Privacy frameworks (SOC 2, ISO27001, HIPPA, CSA STAR, NIST 800-53, NIST CSF), tools to develop SBOM and information gathering frameworks like SIG and CAIQ
- Proven experience collaborating with sales, legal and engineering teams
- At least 10 years of experience in a technology discipline, preferably 6+ years in the cyber security domain
- Experience implementing or using any TPRM tools or platforms (for e.g. KY3P, ProcessUnity, ServiceNow, CyberGRX etc), familiarity with tools like Security Scorecard, Bitsight etc.
- Experience in automating workflows
- Demonstrable customer communication experience around security matters is a plus
Responsibilities:-
- Own and drive the processes to provide expert internal support for security and compliance due diligence requests
- Work and co-ordinate with internal security teams (Cyber Defence, Product Security, Compliance), Engineering, Legal functions and customer account teams to provide timely and high-quality responses to security queries from prospects and customers
- Manage incoming security support requests including security focused questionnaires, customer audits, and client-driven penetration tests as needed
- Develop and maintain customer facing security policies and documentation and manage the Druva's online trust portal
- Ensure customer security documentation and external artifacts are up to date and accurate as per current state security policies
- Evaluate and set the strategy for Druva’s third-party risk management program
- Conduct holistic security assessments of Druva’s existing & new vendors to identify and mitigate potential risks.
- Stay informed about current security vulnerabilities, incidents and assess exposure through Druva’s vendor landscape
- Own and drive risk-reduction in Druva’s External attack surface
- Develop and execute on improvement strategy for phishing simulations and security training of our employees
Similar roles
Technology Change Control Analyst
Aviso Wealth·Vancouver, Canada
Aviso: At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and community. Working with talented and energetic professionals who exemplify our values every day, you will quickly notice that our people and dynamic ‘oneaviso’ culture sets us apart. If you are looking for…
- Hybrid
- Full-time
- Express Entry — PR day one, no employer
Technology Change Control Analyst
Aviso Wealth·Toronto, Canada
Aviso: At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and community. Working with talented and energetic professionals who exemplify our values every day, you will quickly notice that our people and dynamic ‘oneaviso’ culture sets us apart. If you are looking for…
- Hybrid
- Full-time
- Express Entry — PR day one, no employer
Staff Infrastructure Engineer
Ripple·Sydney, Australia
<div class="content-intro"><p><span style="font-weight: 400;">At Ripple, we’re building a world where value moves like information does today. It’s big, it’s bold, and we’re already doing it. Through our crypto solutions for financial institutions, businesses, governments and developers, we are improving the global financial system and creating greater economic fairness and opportunity for more people, in more places around the world. And…
- On-site
- Full-time
- Skilled Independent 189 — PR, no sponsor
Accountant / Assistant Accountant (CA)
SAURABH SOFTSOURCING PRIVATE LIMITED·Ahmedabad, India
The ideal candidate will be involved with preparing financial reports and statements, bank reconciliations, and conducting cyclical audits. Moreover, the candidate must have strong interpersonal skills and possess a strong business acumen. Responsibilities Create ad-hoc reports for various business needs Prepare tax documents Compile and analyze financial statements Manage budgeting and forecasting Qualifications Bachelor's degree in Accounting or related field…
- Full-time
Copywriter
Grapes Worldwide·Delhi, India
About us Grapes, India’s leading Integrated communications agency nurtures digital strategy and marketing approach across paid, earned, and owned platforms. With both brand and business impact in the forefront, Grapes offers full services in Digital and Communication Solutions – Strategy Wonks at head and Creative at heart, we are strong in setting KPIs, goals and executing innovative-creative campaigns. We combine…
- Full-time
IT Support
FoxTalent·Paderborn, Germany
TASKS *Entgegennahme und Bearbeitung von Anfragen von Kunden mit einem Wartungsvertrag *Dokumentation aller Arbeitsschritte in unserem Ticketsystem *Enge Zusammenarbeit mit anderen beteiligten Abteilungen *Testen und Dokumentieren von Fehlern und Entwicklungen REQUIREMENTS *Abgeschlossene IT-Ausbildung mit Berufserfahrung oder mehrjährige IT-Berufserfahrung *Gute Kenntnisse in PC-Hardware, Ticket- und Remote-Tools sowie Netzwerktechnik *Sicherer Umgang mit Microsoft Windows Betriebssystemen und Microsoft Office *Sehr gute Deutschkenntnisse (mind.…
- On-site
- Full-time
- Blue Card — tied; settle 21–33mo
Creative Visualizer (Graphic Designer)
Seventy Event Media Group·Mumbai, India
70 EMG is an award-winning event management company, delivering exceptional events in India and worldwide for over a decade. With offices in Mumbai and Delhi, we specialize in high-profile corporate, institutional, and private events, including luxury weddings, fundraisers, and brand experiences. Our divisions include Seven Steps , a leader in luxury wedding planning, and The Set , one of India’s…
- Full-time
ICT SECURITY ENGINEER
HELIUS TECHNOLOGIES PTE. LTD.·Singapore, Singapore
A bachelor’s degree in computer science, Information Security or a related field, or equivalent professional experience. 8+ years in cyber security, with deep, hands‑on expertise in DFIR, Detection Engineering, Threat Hunting, SIEM, SOAR, EDR, DLP, security automation and AI‑enabled Security Operations. Experience in a regulated financial services or insurance environment (strongly preferred). A proven track record leading major cyber incidents…
- Full-time
- SGD 2k–SGD 3k / yr
- Employment Pass — tied to employer
