IND_Sr Analyst, Information Security at Lowe's

Innovate in Bengaluru

This position is based at our on-site office in Bengaluru. Lowe's offers an ultramodern work environment, complete with cutting-edge technology, collaborative workspaces, an on-site gym and clinic, and other perks to enhance your work experience.

About Lowe’s
Lowe’s is a FORTUNE® 100 home improvement company serving approximately 16 million customer transactions a week in the United States. With total fiscal year 2024 sales of more than $83 billion, Lowe’s operates over 1,700 home improvement stores and employs approximately 300,000 associates. Based in Mooresville, N.C., Lowe’s supports the communities it serves through programs focused on creating safe, affordable housing, improving community spaces, helping to develop the next generation of skilled trade experts and providing disaster relief to communities in need. For more information, visit Lowes.com.

Lowe’s India, the Global Capability Center of Lowe’s Companies Inc., is a hub for driving our technology, business, analytics, and shared services strategy. Based in Bengaluru with over 4,500 associates, it powers innovations across omnichannel retail, AI/ML, enterprise architecture, supply chain, and customer experience. From supporting and launching homegrown solutions to fostering innovation through its Catalyze platform, Lowe’s India plays a pivotal role in transforming home improvement retail while upholding strong commitment to social impact and sustainability. For more information, visit Lowes India

Job Summary
The Sr. Analyst, Information Security leads the development, automation, and scaling of security metrics, reporting, and operational processes to enhance risk visibility and enable data-driven decision-making. This role operates with a high degree of autonomy, driving process maturity, improving efficiency, and supporting the organization’s transition to a predictive, analytics-driven security model.

This individual partners across Security, Technology, and Finance to deliver measurable outcomes, modernize reporting capabilities, and embed scalable workflows and dashboards into core operations. The role also provides mentorship to junior team members and serves as a key contributor to complex, cross-functional initiatives.

Roles & Responsibilities:

Core Responsibilities:

Analyze and interpret complex datasets to identify trends, assess control effectiveness, and generate actionable insights
Define, track, and evolve security metrics, KPIs, and OKRs to measure performance and risk reduction
Develop and deliver dashboards, scorecards, and executive-level reporting
Drive automation of reporting, data integration, and operational workflows
Translate business needs into technical requirements and scalable solutions
Serve as an escalation point and mentor to junior analysts
Partner across teams to align security initiatives with measurable business outcomes
Maintain awareness of emerging security trends and technologies
Consolidate findings and communicate insights to leadership and stakeholders

Metrics & Reporting Ownership
Own end-to-end lifecycle of security metrics, including definition, onboarding, validation, and ongoing maintenance
Develop standardized scorecards and reporting frameworks aligned to risk-based prioritization
Establish consistent measurement practices, including post-implementation (“measure-after”) tracking
Increase reporting cadence and maturity (e.g., transition to more frequent, automated reporting)

Dashboards & Data Visualization
Design and build dashboards that provide near real-time visibility into security risk and performance
Enable self-service reporting for stakeholders through intuitive and scalable visualization solutions
Support executive-level reporting, including monthly and ad hoc deliverables

Automation & Workflow Enablement
Identify and eliminate manual processes through workflow automation (e.g., KNIME or similar tools)
Build reusable workflows and shared services for reporting and operational processes
Support intake, remediation tracking, and reporting automation across security functions

Tech Risk Scorecard (TRS) Enablement
Support the evolution and operationalization of the Tech Risk Scorecard
Onboard and maintain metrics (e.g., MFA, AI, Operational Resilience, SSO/Provisioning)
Improve linkage between metrics, reporting, and remediation pathways
Enable increased publishing cadence and improved data quality

Data Integration & Analytics Support
Partner with data science resources to enable predictive modeling, forecasting, and ROI analysis
Ensure data quality, consistency, and integration across multiple security data sources
Support foundational capabilities for AI/ML-driven insights and reporting

Years of Experience

• 5 to 8 Years of experience building and scaling metrics, dashboards, and reporting frameworks in a security, risk, or technology environment
• Experience in a large, complex omni-channel or e-commerce organization is strongly preferred.

Education Qualification & Certifications

• Bachelor’s degree in computer science, computer information systems, engineering, business administration, cybersecurity, or related field

Preferred Qualifications
Experience building and scaling metrics, dashboards, and reporting frameworks in a security, risk, or technology environment
Strong proficiency in data visualization tools (e.g., Power BI, Tableau) and ability to translate complex data into executive-level insights
Experience with workflow automation and data processing tools (e.g., KNIME, Alteryx, Python, or similar)
Familiarity with data modeling, data integration, and data quality management across multiple systems
Working knowledge of information security domains (e.g., IAM, vulnerability management, GRC) with the ability to translate domain data into enterprise-level metrics
Experience supporting or developing risk scorecards, KPIs, or performance measurement frameworks
Exposure to predictive analytics, AI/ML, or forecasting models and ability to partner with data science teams
Experience developing executive-level reporting
Ability to connect technical metrics to business outcomes, including risk reduction and financial impact
Experience working in cross-functional environments, partnering with security, engineering, and business stakeholders
Familiarity with regulatory and compliance frameworks (e.g., SOX, PCI, NIST) from a reporting or metrics perspective

Lowe's is an equal opportunity employer and administers all personnel practices without regard to race, color, religious creed, sex, gender, age, ancestry, national origin, mental or physical disability or medical condition, sexual orientation, gender identity or expression, marital status, military or veteran status, genetic information, or any other category protected under federal, state, or local law.