Security Operations Program Analyst

About the Role: Wolters Kluwer Global Business Services (GBS) is designed to provide services to the business units in the areas of technology, sourcing, procurement, legal, finance, and human resources. These global centers promote team collaboration using best practices around a specific focus area to drive results and enhance operational efficiencies. There is a constant endeavor to benchmark against best-in-class industry standards to improve the quality of deliverables, increase cost savings, enhance productivity, and reduce time to market for products and applications. We now have an exciting new opportunity for a Senior IT Security Analyst Security Incident Response (SIR) Readiness & Simulation within our Global Business Services division. This new role has been created to support organizational growth and to strengthen our global cyber readiness posture in alignment with evolving industry standards for incident response, tabletop exercises, and documentation governance. This position is Pune, India. In this role you will support SIR readiness, tabletop exercises, and simulation activities, designing and delivering customized incident response scenarios across Wolters Kluwer divisions and key thirdparty partners. You will also maintain and continuously improve the SIR documentation ecosystemincluding playbooks, runbooks, afteraction reports, communication templates, and the broader knowledge basein alignment with industry expectations for documentation structure and audit readiness. The role further supports audits, assessments, customer questionnaires, and regulatory requests by providing accurate, timely, and evidencebased incidentrelated documentation and reporting. You will also support the delivery of technical and nontechnical training, integrating lessons learned from simulations and real incidents, and contributes to event review, escalation, and incident handling to strengthen overall response maturity. Responsibilities: Designs, plans, and facilitates enterprisewide Security Incident Response (SIR) tabletop exercises and simulations, including scenario development, inject creation, stakeholder coordination, and structured delivery, in alignment with established SIR governanceProduces AfterAction Reports (AARs) from tabletop exercises and simulations, documenting lessons learned, capability gaps, and recommended improvements; tracks remediation actions and provides status updates to stakeholdersMaintains and enhances the SIR knowledge base, including incident response playbooks, runbooks, documentation templates, and standard operating procedures, ensuring content remains current and operationally relevantSupports audits, assessments, questionnaires, and customer inquiries by preparing timely, accurate, and evidencebased documentation related to SIR processes, controls, and readinessSupports incident response activities during real events, including coordinating incident bridges, capturing timelines and key decisions, and ensuring consistent and complete incident documentationPartners with crossfunctional teams (Legal, Privacy, Communications, Risk Management, and others) to ensure tabletop scenarios and incident response processes reflect organizational, contractual, and regulatory requirementsCollaborates with the Director of SIR to contribute to the planning and delivery of technical and nontechnical training for SIR team members, incorporating insights from exercises and realworld incidentsContributes to the continuous improvement of incident response processes, playbooks, and simulations by integrating feedback from exercises, audits, metrics, and postincident reviewsPerforms work in alignment with Wolters Kluwer enterprise policies, procedures, and applicable business plansParticipates in crossfunctional incident exercise activities, supporting adherence to defined policies and proceduresMaintains current knowledge of IT security concepts, emerging threat scenarios, and incident response best practicesAssists in the development of vulnerability and threatrelated communications, providing technical input as neededCommunicates findings and improvement opportunities identified during simulations and training that may require configuration changes or operational updates to appropriate teams for evaluation and executionProvides technical guidance and peer support to junior incident responders as needed, without formal supervisory responsibilityEngages in continuous learning and professional development to stay current with evolving security threats, trends, and response methodologies Skills: 7+ years of total experience in Information Technology3+ years of professional experience in an information security function, including analyzing and applying information security risk management, and privacy practicesFlexible working hours to support a global operationDemonstrated experience leading cybersecurity tabletop exercises, including scenario design, facilitation .