Principal Security Analyst | Information Security and GRC

ZoomInfo runs a business to business data and go to market platform, and this principal role covers information security across the technical side plus governance, risk and compliance, audit and compliance work. That combination is worth reading carefully: it is a blend of hands on security and programme work rather than a pure engineering seat, so it suits someone who can both assess a control technically and defend it in an audit. Stated band is eight to ten years, which is a defined range rather than an open ended plus, making the level unusually legible. Location is Bengaluru. Good fit if you have moved past pure operations into security governance but do not want to leave the technical detail behind entirely.

Published requirement is 8 to 10 years of experience in information security across the technical arena, GRC, audit or compliance. Note the range is closed rather than open ended, which is a useful signal: the employer has a specific band in mind and both ends are real. This is a Principal Security Analyst requisition based in Bengaluru. How to read the scope: the posting groups technical security work together with governance, risk and compliance, audit and compliance in a single requirement, which usually means the role spans control design and assessment, security policy and standards, risk registers and treatment plans, evidence collection for external audits, third party and vendor risk, and the technical judgment to know when a control is genuinely effective rather than merely documented. In a company whose product is data about businesses, the compliance surface is meaningful, covering data protection obligations across multiple jurisdictions alongside the usual enterprise certifications customers ask for. Honest fit guidance. Analyst in the title undersells a principal level role at this band, but it does correctly signal that this is not a hands on keyboard engineering position building detections or tooling. If you want to write code and build security systems, look at the cloud security engineering roles elsewhere in today's list instead. If you have grown from a technical security background into the governance and assurance side and want a principal level seat where the technical depth still matters, this fits well and the band is honest about the seniority expected. One practical note on applying: zoominfo.com returns 403 to automated requests, so we verified this posting is live directly against the Greenhouse jobs API rather than by loading the careers page. The apply link works normally in a browser.