Responsibilities

We are looking for an exceptional Senior GRC Analyst to join our growing team. In this role, you will lead compliance assessments for frameworks such as NIST 800-171, ISO 27001, NIST 800-53 (FedRAMP), PCI, MLPS and IRAP, while also driving broader security compliance efforts. The ideal candidate will use strong analytical, communication, and problem-solving skills to evaluate controls, identify gaps, and recommend improvements across security domains. You will also be responsible for:

• Lead and participate in both internal and external audits for frameworks including ISO 27001/27701, PCI-DSS, NIST 800-171, NIST 800-53 (FedRamp), and IRAP

• Experience using or exploring AI/automation tools to enhance, streamline, or scale Governance, Risk, and Compliance (GRC) processes and workflows

• Manage and oversee risk, compliance, and governance initiatives across teams

• Coordinate with process owners, control owners, auditors, and consultants to ensure findings are tracked and addressed

• Conduct risk assessments, security audits, and third-party/vendor risk reviews

• Review contracts to ensure security and compliance requirements are met

• Identify process gaps and recommend improvements to enhance the organization’s security posture

• Communicate risks and compliance requirements clearly to both technical and non-technical stakeholders

• Perform regular user access reviews

• Develop and track remediation plans for identified risks and issues

• Maintain and update the risk register

• Oversee vendor security assurance processes

• Collaborate with stakeholders to design and implement effective internal controls aligned with regulatory standards

• Support risk and security discussions across cross-functional teams

• Build strong working relationships across departments

• Take on additional responsibilities as needed

Requirements

Qualifications / Experience / Technical Skills

Please note that the working hours for this position are from 2:00 PM to 11:00 PM IST (overlap with U.S. Pacific Time required)

• 8+ years of experience in cybersecurity programs, audits, risk management, compliance, or remediation

• Experience working with cloud platforms such as AWS, Azure, or Google Cloud

• Proven ability to negotiate and prioritize risk remediation with internal stakeholders

• Bachelor’s degree in Information Systems, Computer Science, Information Security, or a related field

• Strong understanding of security controls, including cloud environments, firewalls, IDS/IPS, and vulnerability management

• Familiarity with NIST 800-171 and NIST Risk Management Framework (NIST 800-53)

• Experience auditing frameworks such as PCI-DSS, SOC 2, and ISO 27001/27701

• Relevant certifications (CISSP, CISA, PCI ISA, ISO, or similar) are preferred

• Ability to manage multiple priorities independently with minimal supervision

Soft Skills / Personal Characteristics

• Strong communication skills with the ability to translate compliance requirements into technical actions

• High energy and adaptability in a fast-paced environment

• Strong collaboration and a knowledge-sharing mindset

• Excellent time management and organizational skills

• High attention to detail, integrity, and ethical standards

• Willingness to learn and take on new challenges

Additional requirements

• May involve some international travel

• This position requires overlap with U.S. Pacific Time (PST) working hours. Candidates should be available and flexible to work from 2:00 PM to 11:00 PM IST.

• Strong hands-on experience with PCI audits, ISO 27001, NIST 800-171, FedRamp, SOC 2, and potentially IRAP is required.

To help your application stand out, please take time to answer the Job Application Questions below clearly and concisely. All submissions are reviewed by our Hiring Team, not evaluated by AI.

(REQ ID: 2760)

Position Overview:
Seeking a Security Analyst to join our Security Operations Center (SOC), focusing on incident response and threat detection. This role involves working with enterprise SIEM platforms, EDR solutions, and incident management tools to protect IBKR's global trading infrastructure.

Key Responsibilities:

• Triage and investigate security alerts using SIEM/EDR tools
• Execute incident response playbooks
• Perform malware analysis and IOC identification
• Create incident tickets and maintain documentation
• Conduct initial forensic data collection
• Support security event correlation and analysis
• Monitor suspicious endpoint activities
• Participate in 24x7 incident response coverage

Required Technical Skills:

• Experience with SIEM (Splunk/QRadar)
• EDR platforms (CrowdStrike/Carbon Black)
• Incident ticketing systems (ServiceNow/JIRA)
• Windows/Linux log analysis
• Network traffic analysis
• Malware detection tools
• IOC collection and analysis
• Basic forensic tools

Required Experience:

• 5+ years SOC/IR experience
• L1/L2 alert analysis background
• Experience with incident playbooks
• Exposure to MITRE ATT&CK framework
• Understanding of kill chain methodology
• Basic threat intelligence usage

Technical Environment:

• SIEM platforms
• EDR solutions
• TIP platforms
• Forensic tools
• Network monitoring tools
• Vulnerability scanners
• Incident management systems

Work Requirements:

• Rotating shifts (24x7 SOC)
• Incident response handling
• Alert triage and escalation
• Documentation and reporting
• Team collaboration

Growth Path:

• Advanced IR certification support
• Threat hunting training
• Digital forensics exposure
• Technical skill development
• Senior analyst progression

Company Benefits & Perks: 

• Competitive salary package.
• Performance-based annual bonus (cash and stocks).
• Hybrid working model (4 days office/week).
• Group Medical & Life Insurance.
• Modern offices with free amenities & fully stocked cafeterias.
• Monthly food card & company-paid snacks.
• Hardship/shift allowance with company-provided pickup & drop facility*
• Attractive employee referral bonus.
• Frequent company-sponsored team-building events and outings.

* Depending upon the shifts.

**The benefits package is subject to change at the management's discretion.

Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough medical discoveries, accelerate regulatory-grade evidence, and improve patient care. Today, Truveta enables research on more than 130 million de-identified patients across the US.  

Achieving Truveta’s ambitious mission requires an incredible team of talented and inspired people with a special combination of health, software and big data experience who share our company values.

Responsibilities  

Incident Response 

• Handle investigation and response to security incidents across endpoints, identities, email, cloud workloads, and SaaS applications 

• Act as a senior escalation point for SOC analysts during complex or ambiguous security events 

• Participate in on-call rotations and provide senior-level escalation support when needed 

• Lead or contribute to post-incident reviews (RCA, postmortems) and track remediation actions to completion 

• Ensure incidents are accurately documented for audit, compliance, and operational learning 

• Maintain and improve incident response runbooks, playbooks, and escalation procedures 

• Support incident readiness activities, including tabletop exercises and response drills 

Detection Engineering & Automation 

• Develop, tune, and maintain Microsoft Sentinel analytics rules to improve detection quality and reduce false positives 

• Design and optimize KQL queries for investigations, threat hunting, and detection engineering 

• Integrate and maintain log sources and data connectors in Microsoft Sentinel, ensuring data quality and proper normalization 

• Build and maintain SOAR automation and playbooks (Logic Apps) for alert enrichment, triage, and response 

Proactive Security & Posture 

• Perform proactive threat hunting across Microsoft Sentinel and Defender data to identify emerging or stealthy threats 

• Monitor and continuously improve detection coverage and security posture (e.g., Secure Score, exposure signals) 

SOC Maturity & Collaboration 

• Track and report on SOC and incident metrics such as MTTD, MTTA, MTTR, alert volume, and detection effectiveness 

• Partner with engineering and infrastructure teams to drive long-term remediation and risk reduction 

• Contribute to the continuous improvement of SOC tooling, automation, and operational maturity 

• Help define and improve SOC processes, workflows, and standards 

Continuous Learning 

• Stay current on threat intelligence, attacker techniques (MITRE ATT&CK), and the Microsoft security roadmap 

Key Qualifications 

• The knowledge, skills, and abilities typically acquired through the completion of a Bachelor’s degree in Cyber Security, Computer Science, Information Security, Information Systems, or a related field, or equivalent practical experience. 

• 5+ years of experience in Security Operations (SOC), Incident Response, or Detection & Response role, with demonstrated ownership of complex security incidents. 

• Hands-on experience with Microsoft Sentinel (SIEM) and Microsoft Defender XDR (Defender for Endpoint, Identity, Office 365, Cloud Apps). 

• Proficiency in KQL (Kusto Query Language) for investigations, threat hunting, and detection engineering. 

• Experience designing, tuning, and maintaining SIEM detections and SOAR automation, including alert triage and response workflows. 

• Solid understanding of Azure cloud architecture, core services, and native security controls. 

• Familiarity with Azure Entra ID, identity security concepts, RBAC, and IAM-related threats. 

• Experience with handing high-severity security incidents, including cross-team coordination and stakeholder communication. 

• Familiarity with MITRE ATT&CK, threat actor techniques, and modern attack methodologies across cloud, identity, and endpoint environments. 

• Experience supporting on-call rotations and working in a 24/7 or follow-the-sun SOC environment. 

• Strong written and verbal communication skills, with the ability to explain technical issues to both technical and non-technical audiences. 

• Ability to mentor junior analysts and contribute to the continuous improvement of SOC processes and tooling. 

• Relevant certifications such as Microsoft Security Operations Analyst Associate, Azure Security Engineer Associate, SC-200, SC-100, CySA+, GCIH, GCIA, CISSP, or similar are strongly preferred. 

Why Truveta? 

Be a part of building something special. Now is the perfect time to join Truveta. We have strong, established leadership with decades of success. We are well-funded. We are building a culture that prioritizes people and their passions across personal, professional, and everything in between. Join us as we build an amazing company together. 

Truveta is committed to creating a diverse, inclusive, and empowering workplace. We believe that having employees, interns, and contactors with diverse backgrounds enables Truveta to better meet our mission and serve patients and health communities around the world. We recognize that opportunities in technology historically excluded and continue to disproportionately exclude Black and Indigenous people, people of color, people from working class backgrounds, people with disabilities, and LGBTQIA+ people. We strongly encourage individuals with these identities to apply even if you don’t meet all of the requirements. 

Are you a passionate security defender eager to outsmart advanced threats and fortify the future of secure digital work? At Ivanti, as a Senior ThreatOps Analyst, you will be at the very heart of our security operations—actively driving innovation in threat detection, incident response, and intelligence gathering to protect organizations worldwide. Join our collaborative, forward-thinking team and make a tangible impact as you defend, respond, and shape security in an ever-evolving digital landscape. Your expertise will help protect countless users, safeguard mission-critical services, and enable secure innovation without boundaries.

Why this role matters

As a Senior ThreatOps Analyst at Ivanti, you will play a mission-critical role in the security of our cloud and on-premises environments. Your efforts inform and empower Ivanti’s ability to detect, investigate, and respond to emerging threats—ensuring our technology remains trusted, resilient, and ready for the challenges of tomorrow.

What you’ll do:

• Lead and execute security incident response, leveraging your deep expertise to manage and mitigate threats across Ivanti’s global footprint.
• Uncover both known and unknown threats using advanced incident response techniques, threat hunting, threat intelligence, and a strong understanding of attacker TTPs.
• Conduct thorough investigations involving external attacks, insider threats, and digital forensics, ensuring stakeholders stay informed with comprehensive reporting.
• Analyze security logs from diverse sources (SIEM, EDR, DLP, email threat detection, and cloud platforms such as Azure, AWS, and GCP), proactively identifying and disrupting potential threats before impact.
• Develop detection content, craft automation to streamline and elevate security response efficiency, and improve our overall detection and response capabilities.
• Provide actionable risk mitigation strategies, recommendations, and thorough documentation to enhance Ivanti’s security posture.
• Work closely with Senior Threat Analysts, the Incident Response Manager, and the Security Architecture team to coordinate, escalate, and resolve information security events.
• Contribute to knowledge sharing and mentorship within the team to build collective expertise in modern cyber defense.

What you will bring:

• Bachelor’s degree in Information Systems, MIS, Computer Science, Cybersecurity, or a related technical field.
• 7+ years’ experience in cybersecurity incident response, threat hunting, SOC operations, and/or digital forensics in enterprise-scale environments.
• Experience in Mimecast and Falcon NG-SIEM is must.
• Mastery of security tools and platforms including SIEM, EDR, DLP, email security gateways, cloud security (Azure, AWS, GCP), forensic toolsets, and network security solutions.
• Expertise with Windows, Linux, and/or Mac operating systems—at the filesystem and artifact level.
• Strong familiarity with the MITRE ATT&CK framework and hands-on experience in mapping real-world attacks to attacker techniques.
• In-depth understanding of anomalous activity, lateral movement, living-off-the-land techniques, and common attacker tradecraft.
• Excellent organizational skills, time management, and ability to thrive in dynamic, fast-paced environments.
• Exceptional communication skills—able to produce clear reports and guidance for both technical and non-technical stakeholders.
• Proven collaboration skills with internal and external teams to effectively research and implement countermeasures against novel and persistent threats.
• Bonus points for:** Industry-recognized certifications such as SANS (GCIH, GCFA, GNFA), CompTIA (CySA+, Security+), EC-Council (CEH), or Blue Team certifications.

Why Ivanti?

• Remote-friendly, flexible schedules: Empower excellence in every setting and elevate human potential.
• Competitive compensation & total rewards: Including health, wellness, and financial plans tailored for you and your family.
• Global, diverse teams: Collaborate with talented people from 23+ countries.
• Learning & development: Grow your skills with access to best-in-class learning tools and programs.
• Equity & belonging: We value every voice. Your story helps inform our solutions for a changing world.

What drives us

Ivanti’s mission is to elevate human potential within organizations by managing, protecting and automating technology for continuous innovation.

It is through diverse and inclusive hiring, decision-making, and commitment to our employees and partners that we will continue to build and deliver world-class solutions for our customers.

To learn more about Ivanti’s  Mission and Core Values.

Inclusion at Ivanti

Ivanti is proud to be an Equal Opportunity Employer. We’re committed to building a diverse team and fostering an inclusive environment where everyone belongs. We welcome applicants from all backgrounds and walks of life.
Need adjustments during the process? Reach out to talent@ivanti.com—​we’re happy to help.

Ready to make your mark?
Apply today and shape the future of Everywhere Work with Ivanti!

#L1-SHUBHANGI

We are seeking a highly motivated, detail-oriented, and proactive Senior IT Compliance Analyst to support Yext’s security assurance activities with customers, vendors, and internal teams. This role is responsible for responding to product security-related questions, completing security assessments and audit inquiries, and reviewing security and contract language to ensure compliance with Yext’s standards.

The ideal candidate will collaborate closely with Legal, Sales, and Security teams to ensure accurate, timely, and customer-focused responses while maintaining a strong compliance posture. They will bring deep knowledge of security frameworks, exceptional communication skills, and the ability to partner across business and technical teams to strengthen the organization’s overall security posture.

What You'll Do

Governance

• Contribute to the development and maintenance of IT & Security policies, standards, and controls.
• Support the annual control attestation process and provide the required evidence.
• Measure, track, and report on security metrics and key performance indicators (KPIs).
• Ensure ongoing alignment with regulatory and industry compliance requirements (e.g., SOC 2, HIPAA, GDPR, NIS2).
• Support responses to cyber insurance questionnaires by leveraging existing security controls, certifications, and policies.

Risk & Compliance Management

• Conduct risk assessments across systems, applications, and vendors, documenting and tracking outcomes.
• Collaborate with IT, Legal, and Security teams to design and implement mitigation strategies.
• Maintain a centralized repository of standardized security questionnaire responses and keep them current with implemented controls.
• Manage responses to client questionnaires and third-party audit inquiries with accuracy and professionalism.
• Serve as a key point of contact for clients, auditors, and external stakeholders on security-related matters.
• Prepare and provide audit-ready evidence for internal and external audits (SOC 2, SOX, ISO 27001, etc.).
• Partner with control owners to create and track corrective action plans, ensuring timely remediation.
• Identify and implement process improvements to increase efficiency in audit preparation, risk assessments, and responses.
• Provide actionable recommendations to management on enhancing security and compliance practices.

What You Have

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Engineering, or related field; or equivalent experience.
• 5+ years of experience in information security, with a strong focus on audit and compliance management.
• Demonstrated experience conducting risk and compliance assessments.
• Proven success in managing client security questionnaires and third-party audits.
• Familiarity with industry and regulatory compliance frameworks (SOC 2, SOX, ISO 27001, NIST CSF, HIPAA, GDPR).
• Experience with GRC tools and technologies (e.g., OneTrust, SecurityScorecard, Bitsight, Archer, or similar).
• Advanced written and verbal communication skills, with the ability to engage confidently with executives, clients, and auditors.
• Professional certifications such as CISA, CRISC, CISM, CISSP, or CDPSE preferred.

Bonus Points

• Governance & Compliance Expertise – Deep knowledge of regulatory and industry frameworks (SOC 2, SOX, ISO 27001, NIST CSF, HIPAA, GDPR, NIST AI RMF).
• Risk Management – Ability to evaluate risks and support effective remediation strategies.
• Audit & Assessment Skills – Skilled in managing and supporting audits, assessments, and assurance activities.
• Client & Stakeholder Engagement – Strong ability to build trust and deliver timely, accurate responses.
• Communication – Excellent written and verbal skills; able to present technical issues clearly to non-technical audiences and executives.
• Cross-Functional Collaboration – Works effectively across IT, Security, Legal, and business teams.
• Project & Time Management – Strong organizational skills with the ability to balance multiple priorities.
• Continuous Improvement – Identifies opportunities to streamline assurance and compliance processes.
• Technical Acumen – Familiarity with GRC platforms (e.g., OneTrust, SecurityScorecard, Bitsight, Archer) and security tooling.
• Leadership & Influence – Capable of guiding stakeholders and influencing decisions.

Perks and Benefits

At Yext, we take pride in our diverse workforce and prioritize creating an engaged and connected working environment. Our ambitious mission is to transform the enterprise with AI search, and we know that to achieve that, we need a global team of innovators, visionary thought leaders, and enthusiastic collaborators passionate about making a meaningful impact in the world and contributing to an extraordinary culture.

We believe that people do their best when they feel their best — and to feel their best, they must be well-informed, fuelled, and rested. To ensure our employees are at their best, we offer a wide range of benefits and perks, including:

• Performance-Based Compensation: We offer an attractive bonus structure and stock options for eligible positions.
• Comprehensive Leave Package: Our leave package includes Paid Time Off (PTO), Parental Leave, Sick Leave, Casual Leave, Bereavement Leave, National Holidays, and Floating Holidays to ensure a healthy work-life balance.
• Health & Wellness Offerings: We provide medical insurance with 7L coverage, including enhanced parental and outpatient department (OPD) coverage for you, your spouse, two dependent children, and two parents (as applicable and subject to eligibility requirements).
• Relocation Benefits: We offer relocation assistance and an allowance to eligible candidates to help ease your transition.
• World-Class Office & Building Amenities: Our office has a top-notch infrastructure, including gaming rooms, a plush pantry, and breakout areas.

#LI-RK1