Information Security Analyst

Job Description – Information Security Analyst

Location : Remote / Bangalore

Shift : US Time Zone

Employment Type : Full-Time

About Scrut Automation

Scrut Automation is a leading security and compliance automation platform, helping organizations streamline compliance and strengthen their security posture across frameworks like ISO 27001, SOC 2, HIPAA, GDPR, CMMC, and FedRAMP. We work with fast-growing startups and enterprises worldwide, simplifying complex audits and enabling them to achieve certifications faster.

We are looking for an Information Security Analyst (1–3 years experience) with a strong foundation in compliance and a special focus on U.S. federal frameworks (CMMC and FedRAMP) . This role is ideal for someone who is passionate about security frameworks, compliance readiness, and supporting U.S. customers through complex regulatory environments.

Key Responsibilities

• Support customer engagements across ISO 27001, SOC 2, HIPAA, GDPR, CMMC, and FedRAMP.
• Conduct gap assessments and readiness checks specifically for CMMC (Level 2 / 3) and FedRAMP Moderate / High.
• Assist customers in documenting controls, gathering evidence, and preparing for C3PAO assessments (CMMC) and 3PAO audits (FedRAMP).
• Review cloud security configurations (AWS, Azure, GCP) against CMMC and FedRAMP baselines.
• Maintain up-to-date knowledge of NIST 800-53, NIST 800-171, CMMC model, and FedRAMP requirements.
• Collaborate with clients to design remediation plans for identified gaps, ensuring controls are implemented effectively.
• Draft and maintain security documentation including SSPs (System Security Plans), POA&Ms (Plans of Action & Milestones), and incident response procedures.
• Act as a point of contact for U.S. clients, guiding them through compliance journeys with clear communication and actionable steps.

Qualifications

Why Join Scrut Automation

Skills Required

Gdpr, Iso 27001, Gcp, Hipaa, fedramp , Azure, Aws