Staff Information Security Analyst - Security Assurance

druva· Information Security

📍 Pune, Maharashtra, India🗓 Posted Jun 3, 2026

About this role

About Druva

You won’t just join a company at Druva, you’ll help shape the future of data security at the moment it matters most. We are building a modern standard with our cloud-native solutions, designed to simplify the toughest challenges in cyber resilience for our customers. As the pioneer and market leader in fully managed SaaS data protection, we help organizations secure and recover their data from ransomware, cyberattacks, and operational disruptions without the complexity, cost, or risk of legacy infrastructure.

Our momentum is backed by the market: Druva was named a Leader in the 2025 Gartner® Magic Quadrant™ for Backup and Data Protection Platforms, a Leader in the 2025 IDC MarketScape for Cyber-Recovery, and a Leader & Outperformer in the 2025 GigaOm Cloud Data Protection Radar. Even better, customers validate that leadership every day through strong Gartner Peer Insights ratings, standout Net Promoter Scores (NPS), and top willingness-to-recommend results.

Visit druva.com and follow us on LinkedIn, X and Facebook.

Summary:-

The Staff Technical Security Analyst, Security Assurance will be responsible for all activities directed at building trust and confidence in Druva’s data security, privacy, and compliance posture with prospects and customers.

Additionally, they will be responsible for Druva’s Third-Party Risk Management program and drive execution and improvement in Druva’s security culture improvement initiatives around phishing and security awareness.

Preferred Qualifications/Skills:-

Exceptional communication skills, critical thinking ability and strong bias for ownership & learning
Working protocol level understanding of At-Rest and In-Motion Encryption fundamentals (TLS/SSL, BCrypt, PKI, SHA1, AES etc) and Key Management principles
Demostrable knowledge of MITRE ATT@CK framework, OWASP Top-10 Web Application Vulnerabilities and related risks and countermeasures
Knowledge of AWS, Azure services and security controls native to them
Technical Understanding of SaaS Multi-tenant architectures
Knowledge of technical domains such as network security, cloud security & application security
Ability to threat model and assess security risk of interconnected systems and data flows
Background in or strong understanding of security compliance and Privacy frameworks (SOC 2, ISO27001, HIPPA, CSA STAR, NIST 800-53, NIST CSF), tools to develop SBOM and information gathering frameworks like SIG and CAIQ
Proven experience collaborating with sales, legal and engineering teams
At least 10 years of experience in a technology discipline, preferably 6+ years in the cyber security domain
Experience implementing or using any TPRM tools or platforms (for e.g. KY3P, ProcessUnity, ServiceNow, CyberGRX etc), familiarity with tools like Security Scorecard, Bitsight etc.
Experience in automating workflows
Demonstrable customer communication experience around security matters is a plus

Responsibilities:-

Own and drive the processes to provide expert internal support for security and compliance due diligence requests
Work and co-ordinate with internal security teams (Cyber Defence, Product Security, Compliance), Engineering, Legal functions and customer account teams to provide timely and high-quality responses to security queries from prospects and customers
Manage incoming security support requests including security focused questionnaires, customer audits, and client-driven penetration tests as needed
Develop and maintain customer facing security policies and documentation and manage the Druva's online trust portal
Ensure customer security documentation and external artifacts are up to date and accurate as per current state security policies
Evaluate and set the strategy for Druva’s third-party risk management program
Conduct holistic security assessments of Druva’s existing & new vendors to identify and mitigate potential risks.
Stay informed about current security vulnerabilities, incidents and assess exposure through Druva’s vendor landscape
Own and drive risk-reduction in Druva’s External attack surface
Develop and execute on improvement strategy for phishing simulations and security training of our employees

Frequently Asked Questions

Is the salary disclosed for the Staff Information Security Analyst - Security Assurance position at druva?

The salary for this Staff Information Security Analyst - Security Assurance role at druva is not publicly listed. Click "Apply Now" to learn more about the compensation package on their official careers page.

Where is the Staff Information Security Analyst - Security Assurance position at druva located?

This Staff Information Security Analyst - Security Assurance role at druva is based in Pune, Maharashtra, India. The position is listed as on-site or hybrid. Check the full job description or apply directly to confirm the work arrangement.

Which team or department does the Staff Information Security Analyst - Security Assurance at druva belong to?

This Staff Information Security Analyst - Security Assurance position is part of the Information Security department at druva. See the full job description for more information about the team structure and responsibilities.

How do I apply for the Staff Information Security Analyst - Security Assurance position at druva?

Click the "Apply Now" button on this page. You will be redirected to druva's official application portal hosted on greenhouse where you can submit your application directly.

When was the Staff Information Security Analyst - Security Assurance job at druva posted?

This Staff Information Security Analyst - Security Assurance position at druva was posted on Jun 3, 2026. Apply as soon as possible — early applications are often reviewed first.

Staff Information Security Analyst - Security Assurance

druva

Apply for this role ↗

You'll be redirected to druva's official application page on Greenhouse.