Infosec Analyst - TPRM

Job Description This is a remote position. About Leegality: Leegality works with large Indian businesses to digitally transform critical compliance processes in a fast, easy and secure way. We have multiple products across 2 categories: Document Infrastructure: Products that help businesses build paperless processes at scale: Document Execution Workflow: A unified platform for businesses to digitally execute ( eSign, eStamp, Template Pre-fill, Document Fraud Prevention etc. ) agreements, forms and other documents in a compliant way. Currently in use by 2000+ Indian businesses from giants like HDFC and SBI Cards to high-growth disruptors like goDigit and Cars24. Contract Management: An AI-powered platform for businesses to quickly review, negotiate and take action on contracts Signstation: A simple platform for businesses to digitally sign simple documents like invoices, policies and letters in a cost effective manner Consent Infrastructure: Consentin: An end-to-end DPDP and Privacy compliance platform for Indian businesses Consentin Lens: A data discovery platform for businesses to identify the personal data they collect and store. If you’re interested in building mission critical software that operates at population scale ( 75 million + Indians have signed at least one document through Leegality ) then join Leegality. Curious about our impact? Explore our customer success stories: leegality.com/case-studies Our Culture At Leegality, trust, ownership, transparency, and having fun while doing meaningful work are core to how we operate — not just values on paper. Our team rated us an incredible 97 eNPS for FY 2023–24 — the highest among 175+ startups surveyed. We focus deeply on helping our people grow and stay motivated. Some of the perks you’ll enjoy: Flexible working hours Hybrid work setup Bi-annual performance appraisals A culture that rewards initiative, curiosity, and impact If you're looking for a place where you can make a real difference while working with smart, driven, and genuinely nice people, welcome to Leegality. Location: Hybrid Role Brief As Information Security Analyst you will be responsible for managing third party risk management, assisting the Infosec team in implementing ISMS related activities and protecting systems and assets from external and internal threats. Leegality is an ISO 27001 certified Company. At Leegality you will - Facilitate assurance-related requirements. Have wider-than-usual exposure to regulatory compliance. Implement best-in-class security practices. Have the opportunity to advance security domain knowledge at a rapid pace. Directly report to Information Management and advance your leadership skills Key Responsibilities: Understanding the Leegality product and its features. End-to-end ownership of responding to client security assessment questionnaires and Information Security Assurance Requests. Keeping the track of security evidence and updating them periodically. Collaborate with relevant teams to plan and develop work program timelines, risk assessments and other planning documents Performing vendor risk management. Evaluating the security of a product or service provider prior onboarding. Assisting Infosec team in maintenance of ISMS. Ensure technology and information risks are effectively identified, assessed, controlled, managed, reported, and timely closure of Assurance action Assist in deploying proper information systems, resources, and controls to maximize efficiencies and minimize risk Demonstrate and apply a thorough understanding of complex information systems, strong project management skills, and use of current technology and tools to enhance the effectiveness of deliverables and services Build strong relationships with all stakeholders to drive continuous improvement on Technology Risk/Project governance processes Ensure business continuity, disaster recovery and stress testing controls are defined, documented, and conducted regularly Assist InfoSec team in managing the organization's Operational Risk Assurance & Controls Testing Plan. Assist InfoSec Manager in day-to-day compliance activities to maintain the company’s ISO 27001:2022, ISO 27017, ISO 27018, ISO 22301 certification and SOC 2 Type 2 Compliancy. Communication skills to develop clear protocols, inform management about potential risk issues, and relay information about policy changes effectively Desired Skills and Experience: Minimum 3 to 4 years of experience in core Information Security domain, preferably in the BFSI or B2B IT sectors Certifications like ISO 27001 LA, CISA, CISSP will be an added advantage Hands-on experience with multiple External & Client InfoSec Audits. ​We value strong communication, a collaborative and positive attitude, and a professional presence - especially when working with team members and contributing to a healthy and productive internal culture. Recruitment Process: ​ Our hiring process combines AI-powered evaluations with structured interviews to ensure a fair and seamless experience. You will be contacted via email with the next steps upon being shortlisted. The process may include Assessments, AI-enabled interviews, and In-Person Interviews with our team. Final selection and CTC will be based on your overall performance and experience. Apply directly through our career page: https://careers.leegality.com/jobs/Careers For more information about us please visit our: Our Company and Culture: https://bit.ly/3Iqm5SB Our Website: www.leegality.com/ Our LinkedIn Page: www.linkedin.com/company/leegalit y/ Leegality's Privacy Notice: https://www.leegality.com/employee-privacy-notice