Information Security GRC Analyst 3
Adobe
full-time
Posted on:
Location Type: Office
Location: Bangalore • India
Visit company websiteExplore more
About the role
- Perform information security assessments covering domains such as user access management, network security, OS & application security, encryption, backup management, disaster recovery, physical security, and training & awareness.
- Drive technology compliance activities across Adobe under the supervision and guidance of the Tech GRC manager.
- Help build a scalable, continuous compliance monitoring program for products and services to maintain and strengthen security and compliance posture.
- Identify automation opportunities and implement scalable solutions, including technical and monitoring controls.
- Build and maintain scalable processes to support security compliance across the APAC region, ensuring alignment with global standards and unified compliance strategies.
- Translate security compliance requirements into actionable programs, including gap analyses, remediation plans, and implementation of necessary security controls.
- Develop and maintain strong relationships based on trust and transparency with control owners, auditors, and customers.
- Contribute to the expansion of Common Control Framework adoption throughout the organization, actively improving the framework to meet evolving needs and industry standards.
- Coordinate with internal organizations at multiple levels to ensure security compliance and risk posture are maintained.
- Liaise with external auditors and customers to provide assurance regarding Adobe’s security compliance program.
- Collaborate and coordinate activities with the Tech GRC team based across multiple geolocations.
Requirements
- Bachelor’s degree or equivalent experience in Information Security/Cyber Security or related field.
- Minimum 3-6 years of related security compliance assessments, IT/Cloud auditing, and control testing experience.
- Proven knowledge of Security Compliance frameworks such as IRAP, Cyber Essential Eight, ISMAP, ISO 270xx, SOC 2, etc.
- Strong auditing background, technical expertise, and deep knowledge of information security controls including but not limited to SDLC, Cryptography, Access management and Backup.
- Knowledge of cloud infrastructure like AWS, Azure, GCP, along with hands on experience.
- Knowledge of AI security and governance, with the ability to assess and implement controls for emerging technologies.
- Good interpersonal, verbal and written communication skills.
- Relevant security related certifications (e.g., CISA, CISM) are a plus.
Benefits
- Adobe is proud to be an Equal Employment Opportunity employer.
- Flexible working hours
- Professional development opportunities.
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
information security assessmentsuser access managementnetwork securityOS securityapplication securityencryptionbackup managementdisaster recoverysecurity compliance frameworkscloud infrastructure
Soft skills
interpersonal skillsverbal communicationwritten communicationrelationship buildingtrusttransparencycollaborationcoordination
Certifications
CISACISM