Compliance and Security Analyst

We are seeking a skilled IT Compliance and Security Analyst with strong expertise and hands-on experience in the information security domain. In this role, you will handle compliance and security-related inquiries from both internal teams and external customers. Your responsibilities will include reviewing each request carefully, preparing accurate and policy-supported responses, obtaining approval from the Chief Information Security Officer (CISO), and communicating the finalized responses to the requesters in a timely manner.

Key Responsibilities

- Receive and evaluate compliance and security queries from internal stakeholders and external customers concerning documents, policies, and services.
- Utilize your information security knowledge to assess each query and ensure responses accurately represent the organization’s security controls and practices.
- Conduct thorough research to identify relevant policies, procedures, certifications, and supporting evidence for each inquiry.
- Draft clear, precise, and well-structured responses, including security questionnaires, due diligence requests, and audit-related questions.
- Share approved responses and documentation with requesters within agreed timelines to maintain transparency and trust.
- Maintain an organized tracker for incoming requests, monitoring status, approvals, and turnaround times to ensure efficiency.
- Keep security and compliance documentation well-organized, version-controlled, and up to date to support audit readiness.
- Collaborate with IT, Legal, HR, and other departments to gather necessary information and evidence for compliance purposes.
- Support internal and external audits, assessments, and control reviews by providing accurate and timely information.
- Identify recurring queries and contribute to building a library of standard, pre-approved responses to streamline future communications.

Required Qualifications

- Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field.
- 3 to 5 years of experience in IT compliance, information security compliance, Governance, Risk, and Compliance (GRC), or security assurance roles.
- Strong knowledge and practical experience in the information security domain, including security policies, risk management, security controls, and best practices.
- Working familiarity with security frameworks and standards such as ISO 27001, SOC 2, NIST, and GDPR.
- Understanding of general IT controls, including access management, change management, backup and disaster recovery, and vulnerability management.
- Experience in completing customer security questionnaires and supporting audit processes.
- Excellent written communication skills, with the ability to clearly explain technical and compliance topics to diverse audiences.
- Strong attention to detail and effective document control practices.
- Proven ability to manage multiple requests simultaneously while meeting deadlines.
- Relevant certifications such as ISO 27001 Lead Implementer or Lead Auditor, Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Security+ are highly desirable.
- Experience working with international or enterprise clients is preferred.

Compensation and Work Location

The position offers a competitive monthly salary starting from Rs 150,000. This role requires in-person attendance at the designated work location.

This opportunity is ideal for professionals looking to leverage their information security expertise in a dynamic environment, supporting compliance and security initiatives across diverse teams and clients.