Compliance and Security Analyst

We are looking for a skilled IT Compliance and Security Analyst with a solid background in information security to join our team. In this role, you will be responsible for managing compliance and security-related inquiries from both internal departments and external customers. Your duties will include reviewing requests, preparing accurate and policy-aligned responses, obtaining necessary approvals from the Chief Information Security Officer (CISO), and communicating the finalized information promptly to the requesters. This position plays a crucial role in ensuring that our security practices and documentation meet the highest standards and support our organizational goals.

Key Responsibilities
- Receive and evaluate compliance and security queries related to documents, policies, and services from internal stakeholders and external customers.
- Apply your expertise in information security to assess each inquiry and ensure responses accurately reflect our security controls and practices.
- Conduct thorough research to identify applicable policies, procedures, certifications, and supporting evidence for each request.
- Prepare clear and concise responses to security questionnaires, due diligence requests, and audit-related questions.
- Communicate approved responses and documentation to requesters within established timelines.
- Maintain a detailed and organized tracker for all incoming requests, including their status, approvals, and turnaround times.
- Ensure security and compliance documentation is well-maintained, version-controlled, and regularly updated.
- Collaborate with IT, Legal, HR, and other relevant departments to gather necessary information and supporting evidence.
- Provide support during internal and external audits, assessments, and control reviews.
- Identify common queries and assist in developing a library of standard, pre-approved responses to improve efficiency.

Required Qualifications
- Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related discipline.
- Between 3 to 5 years of experience in IT compliance, information security compliance, Governance, Risk, and Compliance (GRC), or security assurance roles.
- Strong knowledge and hands-on experience in information security, including security policies, risk management, security controls, and industry best practices.
- Familiarity with industry frameworks and standards such as ISO 27001, SOC 2, NIST, and GDPR.
- Understanding of general IT controls including access management, change management, backup and disaster recovery, and vulnerability management.
- Proven experience in completing customer security questionnaires and supporting audit processes.
- Excellent written communication skills, with the ability to clearly articulate technical and compliance concepts.
- High attention to detail and strong document control capabilities.
- Ability to manage multiple requests simultaneously while meeting deadlines.

Preferred Qualifications and Benefits
- Relevant certifications such as ISO 27001 Lead Implementer or Lead Auditor, Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Security+.
- Experience working with international or enterprise-level clients.
- Competitive salary starting at Rs 150,000 per month.
- This is an in-person role, offering the chance to work in a dynamic environment where your expertise will directly contribute to strengthening our organization’s security posture.

This opportunity is ideal for a professional seeking to leverage their IT compliance and security knowledge in a challenging and rewarding setting, helping to uphold and enhance the company’s security standards.