Senior IT Security Analyst

You will join our IT Security department

As our new Senior IT Security Analyst based at Ramboll India, you will be part of a team of skilled security professionals and consultants tasked with managing and developing Ramboll’s global cyber and information security program.

Your key tasks and responsibilities will be:

• Responsibility for security awareness activities and mandatory training
• Support and administer policy approval and publishing workflow within the Information Security Management System
• Develop, implement, and maintain information security policies, procedures, and guidelines to continue anchoring the Information Security Management System
• Develop, implement, and maintain guidance and tools that enable business functions to comply with the Information Security Management System
• Conduct routine review of policies, procedures, and associated guidelines to ensure current, approved and communicated governance
• Support business units with administrative follow-up cyber and information security plans
• Conduct with regular follow-up on IT system security plans, actions, and controls
• Monitor and measure compliance with our information security management system and monitoring the external threat picture to further develop the information security management system and associated controls.

Your starting point for constant growth

From the moment you join Ramboll, we will support your personal and professional development so that you grow with the company. For this role, we believe your starting point is:

• A 3-year undergraduate degree in related field of study (e.g., Management Information Systems, Information Technology, Computer Science)
• At least 3 years of relevant work experience with working with processes, procedures, and documentation and / or quality management systems
• Experience in writing and implementing global governance and provide compliance support and guidance to business units in scope
• Ability to support the team develop, document, and maintain policies, processes, procedures, and standards
• Knowledge of Information Security Management systems based on ISO27001/27002 is an advantage
• Knowledge of other security best practices like CIS or NIST or SOC-2 is an advantage
• Knowledge on other best practice frameworks like LEAN or CMMI is advantage