Information Security and Data Privacy Analyst

About QPIAI India Pvt. Ltd.:

QPIAI India Pvt. Ltd. is a next-generation technology company focused on Artificial Intelligence, Quantum Computing, and advanced IT innovation. At QPIAI, we believe that great ideas grow in the right environment. Our culture is built on flexibility, collaboration, and continuous learning, supported by a strong commitment to employee well-being and work–life balance. We provide a workplace that encourages creativity, fosters professional growth, and empowers people to take ownership of impactful projects.

We are proud to be a company where innovation meets opportunity—where passionate professionals come together to solve complex challenges and shape the future of technology. With our rapid expansion across India, Dubai, and Singapore, we are actively looking for individuals who share our mission and vision.

If you are driven by curiosity, inspired by cutting-edge technologies, and eager to contribute to a global tech journey, QPIAI is the place to grow, lead, and make a meaningful impact.

Role Overview

We are seeking a motivated Information Security & Data Privacy Analyst with one year of

experience to support and enhance our privacy, cybersecurity, and compliance programs. The

candidate will assist in implementing data protection controls, managing security operations

activities, supporting governance, risk, and compliance (GRC) initiatives, and ensuring

adherence to applicable privacy regulations and security standards.

Key Responsibilities

Data Privacy & Compliance

1. Maintain and update the Record of Processing Activities (ROPA).

2. Support Data Protection Impact Assessments (DPIAs) and privacy risk assessments.

3. Track and manage Data Subject Requests (DSRs), including access, correction, portability, and deletion requests.

4. Support implementation and maintenance of information security policies, standards, and procedures.

5. Conduct periodic user access reviews and access control audits.

6. Assist in security awareness and phishing simulation programs.

7. Support compliance initiatives related to ISO 27001, SOC 2, and other security frameworks.

8. Support compliance initiatives related to DPDPA, & GDPR.

9. Participate in risk assessments and maintain risk registers.

10. Assist with internal and external security audits.

11. Assist with TPRM and Risk Management

Information Security Support

1. Monitor, investigate, and respond to security events using SIEM solutions such as Splunk, ELK, or Wazuh.

2. Perform vulnerability assessments, track remediation activities, and maintain vulnerability management reports.

3. Conduct network discovery, asset identification, and security scanning using tools such as Nmap, Nessus, and OpenVAS.

4. Support Vulnerability Assessment and Penetration Testing (VAPT) activities for infrastructure and applications.

5. Perform web application security testing using Burp Suite and OWASP testing methodologies.

6. Analyze security logs, conduct threat hunting, and support threat intelligence monitoring and IOC analysis.

7. Investigate security incidents and assist with containment, eradication, recovery, and incident documentation.

8. Monitor firewall, IDS/IPS, endpoint security solutions, and perform network traffic analysis using Wireshark.

9. Conduct security validation and testing using tools such as Metasploit and verify security configurations across systems.

10. Support Business Continuity (BCP), Disaster Recovery (DR) exercises, security awareness programs, and cyber resilience activities.

11. Review firewall logs, security policies, and network traffic, with working knowledge of Palo Alto Firewall administration and monitoring.

Required Skills & Knowledge

Technical Skills

• Understanding of cybersecurity principles, security operations, and risk management.
• Working knowledge of data privacy and protection regulations (GDPR, DPDP Act, HIPAA, etc.).
• Familiarity with ISO 27001, SOC 2, NIST CSF, or similar frameworks.
• Basic understanding of vulnerability management and incident response processes.
• Experience with security documentation, reporting, and compliance activities.
• Knowledge of access management concepts and security monitoring.
• Proficiency in Microsoft Excel, Word, PowerPoint, and reporting tools.

Soft Skills

• Strong analytical and problem-solving skills.
• Good communication and stakeholder management abilities.
• Attention to detail and documentation skills.
• Ability to work independently and collaboratively within cross-functional teams.

Eligibility Criteria

Master's degree in Computer Science or Information Technology or Information Security or Risk & Compliance

Preferred Certifications (Optional)

• CompTIA Security+
• ISO/IEC 27001 Foundation or Lead Implementer
• Certified in Cybersecurity (CC)
• CEH
• Privacy certifications (DPO, GDPR, CDPSE, CIPP, CIPM, etc.)
• Any relevant cybersecurity or privacy training

What You Will Gain

• Hands-on experience in Privacy governance
• Exposure to security tools, frameworks, and compliance standards
• Risk management, Security operations support, and Data protection regulations
• Mentorship from experienced security professionals
• Internship Certificate & Letter of Recommendation (based on performance)
• Opportunity for full-time employment based on performance