Information Security Analyst 3506

Job description

Job Role: You will serve as an Analyst within the Allianz Risk Shield (ARS) framework. Your primary responsibility is to review and test evidence submitted by service managers against the security controls defined in the Allianz Security Policy, provide effectiveness ratings, and support issue management through to resolution. Additionally, you will contribute to the Global Portfolio Office approval activities for App1, Data privacy and AI registration, Digital integrated information risk management, Availability management support and CMDB activities. You will also support security operations activities across the division, working closely with QA leads, service managers, ARS SPOCs, and cross-functional security teams. What You Will Do: A. ARS QA Review & Evidence Assessment Review evidence submitted by service managers for Test of Design (ToD) and Test of Effectiveness (ToE) across ARS controls Rate controls as effective or ineffective based on evidence quality and completeness Identify common quality gaps such as generic user manuals instead of service-specific documentation, links instead of actual evidence, missing Business Owner sign-off, and missing dates/approvals/version information Validate vendor certifications including SOC 2 Type II reports (validity within one year), ISO 27001 certificates with Statement of Applicability (SoA), ISAE 3402 , and PCI-DSS certifications Assess Shared Responsibility Templates (SRT) for SaaS applications and verify vendor/client responsibility assignments across the 57 TPRM controls Manage issue states in ServiceNow GRC (New → Respond → Review) and support issue creation in AZT Archer within 30 days for non-compliant controls Ensure evidence meets the 5 Ws standard (Who, What, When, Where, Why) and references specific service names and SON B. Additional activities Support Project management approval in GPO division. You will work closely with the GPO lead of App1 Support data privacy and AI registrations for App1 division Support CMDB topic if required Support and track DIIRM process across App1 division Support availability management KPI tracking across App1 Support Application 1 services in various security initiatives as a security officer and across other discipline such as an Assurance SPOC Exposure to AI tools is an add-on advantage. What You Bring: Technical Knowledge Skill Area Details Information Security Fundamentals Understanding of ISO 27001, SOC 2, and ISAE 3402 frameworks Risk & Compliance Basic knowledge of IT risk management and control frameworks Security Operations Understanding of SIEM, EDR, and security monitoring principles Data privacy and AI Basic knowledge of privacy and AI tools IT Regulatory Standards Awareness of GDPR, IT compliance, and audit standards Tools & Platforms Comfort working with ServiceNow, SharePoint, AZT Archer, and Excel-based tools Core Competencies: Analytical Thinking – Critically evaluate evidence against control requirements and identify gaps Attention to Detail – Precision in reviewing documentation for timestamps, approvals, sign-offs, and version information Communication – Clear written and verbal skills for QA recommendations, issue documentation, and stakeholder interaction Time Management – Ability to manage 3-day testing windows per application and 2-day rework cycles Problem-Solving – Identify root causes of evidence deficiencies and suggest actionable improvements Teamwork – Collaborate effectively with QA leads, service managers, ARS SPOCs, and Fit-Gap teams Preferred Certifications (Nice to Have) CompTIA Security+ ISO 27001 Lead Auditor / Internal Auditor Certified Information Systems Auditor (CISA) CISSP Certified Ethical Hacker SANS / GIAC certifications (e.g., GSEC, GCIH, GSNA, GEVA) Penetration testing certifications (e.g., OSCP, GIAC GPEN) ITIL Foundation Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us. At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust. We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. Join us . Let's care for tomorrow.