Information Security Analyst

When you join Accurate Background, you’re an integral part of making every hire the start of a success story. Your contributions will help us fulfill our mission of advancing the background screening experience through visibility and insights, empowering our clients to make smarter, unbiased decisions.

As part of the company’s Global Information Security team, the Information Security Analyst will be supporting governance, risk, compliance (GRC), and client assurance aspects of the organization’s security program. This role ensures that the company meets industry security standards, regulatory requirements, and client security expectations.

The ideal candidate should have a strong understanding of security frameworks, risk assessment methodologies, compliance standards (ISO 27001, SOC 2, NIST, GDPR, etc.), vendor risk management, and client security assurance. They must also possess excellent analytical, communication, and collaboration skills to work across teams, support audits, and respond to client security inquiries

Job Duties:

• Governance, Risk & Compliance (GRC)
• Develop, implement, and maintain information security policies, procedures, and controls in alignment with industry frameworks (ISO 27001, NIST CSF, CIS, SOC 2, GDPR, PCI-DSS).
• Conduct risk assessments, compliance audits, and security gap analysis to identify areas for improvement.
• Support and coordinate ISO 27001, SOC 2, and other applicable security audits, ensuring audit readiness and driving remediation efforts.
• Assist with third-party/vendor risk assessments, ensuring suppliers meet security requirements.
• Monitor and assess regulatory changes to ensure the company remains compliant with evolving security standards.
• Work with various teams (IT, Legal, Engineering, HR) to ensure compliance with security policies and drive GRC initiatives.
• Track and report security metrics and Key Risk Indicators (KRIs) to leadership.
• Document Standard Operating Procedures (SOPs), security reports, and compliance documentation as required.
• Respond to Requests for Proposals (RFPs, DDQ):
• Collaborate with cross-functional teams to gather necessary information and develop comprehensive responses to RFPs.
• Ensure RFP responses adhere to industry standards, compliance requirements, and company policies.
• Coordinate with subject matter experts to address technical aspects of RFPs.
  
  
  

Required Qualifications:

• Minimum 2 years of experience in Information Security Governance, Risk, and Compliance (GRC).
• Experience in responding to RFPs, DDQs, and client security inquiries.
• Experience with security frameworks and compliance standards (ISO 27001, NIST, SOC 2, GDPR, HIPAA, PCI-DSS).
• Strong understanding of risk management methodologies (Asset based, Threat based).
• Experience with third-party/vendor risk management and security audits.
• Hands-on experience with GRC tools (e.g., Archer, ServiceNow GRC, OneTrust).
• Strong communication skills to translate technical security concepts into business-friendly language.
• Demonstrated ability to manage multiple priorities and deadlines in a fast-paced environment.
• Proficiency in Microsoft Office Suite (Word, Excel, PowerPoint).
  
  
  

Preferred Qualifications:

• Bachelor’s degree in computer science, Cybersecurity, or a related field.
• 3+ years of experience in Information Security with a focus on GRC and client assurance.
• Certifications such as CISM, CRISC, ISO 27001 Lead Implementer/Auditor, CISSP, CISA.
• Experience with cloud security governance (AWS, Azure, GCP).
• Knowledge of RFP response tools (e.g., Jira, Loopio) is a plus.
• Familiarity with incident response frameworks and security operations.
  
  
  

Working Conditions:

• This position is hybrid, requiring 2 days a week in the office (Hyderabad, India).
• Flexible working hours may be required to accommodate different time zones or urgent situations.
• Occasional travel may be required for team meetings, training, or conferences.
  
  
  

Please note that the above job description represents a general overview of the responsibilities and requirements for this position at Accurate Background. Duties and qualifications may vary based on specific business needs and organizational changes.

The Accurate Way:

We offer a fun, fast-paced environment, with lots of room for growth. We have an unwavering commitment to diversity, ensuring everyone has a complete sense of belonging here. To do this, we follow four guiding principles – Take Ownership, Be Open, Stay Curious, Work as One – core values that dictate what we stand for, and how we behave.

Take ownership.

Be accountable for your actions, your team, and the company. Accept responsibility willingly, especially when it’s what’s best for our customers. Give others every reason to trust you, believe in you, and count on you. Rise to every occasion with your personal best.

Be open.

Be open to new ideas. Be inclusive of people and ways of doing things. Make yourself accessible and approachable, and communicate with genuineness, transparency, honesty, and respect. Embrace differences.

Stay curious.

Stay curious even as you move forward. Tirelessly ask questions and challenge the status quo in your pursuit of new ideas, ways to solve problems, and to continually grow and improve.

Work as one.

Work together to create the best customer and workplace experience. Put our customers and employees first—before individual or departmental agendas. Make sure they get the help they need to succeed.

About Accurate Background:

Accurate Background’s vision is to make every hire the start of a success story. As a trusted provider of employment background screening and workforce monitoring services, Accurate Background gives companies of all sizes the confidence to make smarter, unbiased hiring decisions at the speed of demand. Experience a new standard of support with a dedicated team, comprehensive technology and insight, and the most extensive coverage and search options to advance your business while keeping your brand and people safe.

Special Notice:

Accurate is aware of schemes involving fraudulent job postings/offers and/or individuals or entities claiming to be employees of Accurate. Those involved are offering fabricated employment opportunities to applicants, often asking for sensitive personal and financial information. If you believe you have been contacted by anyone misrepresenting themselves as an employee of Accurate, please contact humanresources@accurate.com .

• Please be advised that all legitimate correspondence from an Accurate employee will come from "@accurate.com" email accounts.
• Accurate will not interview candidates via text or email. Our interviews are conducted by recruiters and leaders via the phone, Zoom/Teams or in an in-person format.
• Accurate will never ask candidates to make any type of personal financial investment related to gaining employment with the Company.