IT Compliance and Security Analyst

We are looking for a skilled IT Compliance and Security Analyst with solid expertise in information security to join our team. In this role, you will be responsible for managing compliance and security-related inquiries from both internal teams and external customers. Your main tasks will involve carefully reviewing each request, preparing accurate and policy-aligned responses, obtaining approval from the Chief Information Security Officer (CISO), and ensuring timely communication of the approved information to the requesters. This position demands strong attention to detail, excellent communication skills, and the ability to collaborate effectively across departments.

Key Responsibilities
- Receive and assess compliance and security queries from internal stakeholders and external customers related to documents, policies, and services.
- Apply your information security knowledge to evaluate each inquiry and ensure responses accurately reflect the company’s security controls and practices.
- Conduct detailed research to identify relevant policies, procedures, certifications, and supporting evidence for each request.
- Draft clear, concise, and well-structured responses, including security questionnaires, due diligence requests, and audit-related inquiries.
- Deliver approved responses and documentation to requesters within agreed timelines.
- Maintain an organized tracker to monitor incoming requests, their status, approvals, and turnaround times.
- Keep security and compliance documentation up to date, well-organized, and version-controlled.
- Collaborate with IT, Legal, HR, and other departments to gather necessary information and evidence.
- Support internal and external audits, assessments, and control reviews as needed.
- Identify recurring queries and help develop a library of standardized, pre-approved responses to improve efficiency.

Required Qualifications
- Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related discipline.
- 3 to 5 years of experience in IT compliance, information security compliance, Governance, Risk, and Compliance (GRC), or security assurance.
- Strong knowledge and practical experience in information security, including security policies, risk management, security controls, and industry best practices.
- Familiarity with frameworks and standards such as ISO 27001, SOC 2, NIST, and GDPR.
- Understanding of general IT controls, including access management, change management, backup and disaster recovery, and vulnerability management.
- Proven experience in completing customer security questionnaires and supporting audit processes.
- Excellent written communication skills with the ability to explain complex technical and compliance topics clearly and effectively.
- High attention to detail and strong document control skills.
- Ability to manage multiple requests simultaneously while consistently meeting deadlines.

Preferred Qualifications and Benefits
- Certifications such as ISO 27001 Lead Implementer or Lead Auditor, Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Security+ are highly desirable.
- Experience working with international or enterprise clients is an advantage.
- The position offers a competitive monthly salary starting from Rs 150,000.
- This role requires in-person attendance at the company’s location.

This is an excellent opportunity for a detail-oriented professional who is passionate about upholding high standards of IT compliance and security within a fast-paced and dynamic environment.