Sansera Engineering Limited
PRIME FUNCTION
We are looking for an
Information Security Analyst/Engineer to support our Information Security Management System (ISMS) and Governance, Risk & Compliance (GRC) activities. This role is ideal for freshers or early-career professionals interested in information security, risk management, and compliance frameworks.
Job Description / Responsibilities
- Assist in maintaining ISO 27001:2022 documentation policies, procedures, SOPs, and records.
- Support risk assessments, risk treatment tracking, and updating the risk register.
- Help with internal audits, evidence collection, and preparing audit documentation.
- Coordinate security awareness and training activities.
- Support third-party/vendor risk assessments and basic due diligence.
- Track compliance tasks such as policy reviews, backup checks, access reviews, etc.
- Prepare basic reports and dashboards for management review.
- Assist in mapping and maintaining controls across frameworks such as ISO 27001 (basic understanding sufficient).
AUTHORITY
JOB SPECIFICATION / COMPETENCY
- Bachelor's degree in Computer Science, IT, Information Security, or related fields.
- Experience- 0-2 years.
- Basic understanding of information security principles (CIA triad, access control, secure configurations).
- Good communication skills and ability to create clear documentation.
- Familiarity with ISO 27001 fundamentals (even at a high level).
- Strong analytical skills and attention to detail.
- Proficiency in MS Office (Word, Excel, PowerPoint).
Good to Have (Optional)
- ISO 27001 Foundation / Internal Auditor training
- Internship or academic project in Cybersecurity or Compliance.
Soft Skills
- Good documentation and reporting skills.
- Ability to work in teams and follow structured processes.
- Willingness to learn and grow in Information Security & Compliance.
PERFORMANCE MEASURES
- ISMS Documentation Management
- Risk Management Internal Audit Support
- Compliance Tracking & Reviews
- Security Awareness & Training
- Vendor / Third-Party Risk Management
- Reporting & Dashboarding
- Control Mapping (ISO 27001)
- Process Adherence
Skills
Competencies
