Compliance and Security Analyst

We are seeking a skilled IT Compliance and Security Analyst with solid expertise and hands-on experience in the information security field. In this role, you will be responsible for managing compliance and security-related inquiries from both internal teams and external customers. Your duties will include reviewing each request carefully, preparing accurate and policy-supported responses, obtaining approval from the Chief Information Security Officer (CISO), and delivering the finalized responses to the requesters in a timely manner.

Key Responsibilities

- Receive and evaluate compliance and security queries from internal stakeholders and external customers related to documents, policies, and services.
- Utilize your information security knowledge to assess each query and ensure that responses accurately represent the organization’s security controls and practices.
- Conduct thorough research to identify relevant policies, procedures, certifications, and supporting evidence for each inquiry.
- Draft clear, precise, and well-structured responses, including security questionnaires, due diligence requests, and audit-related questions.
- Share approved responses and documentation with requesters within agreed timelines.
- Maintain a detailed tracker of incoming requests, including their status, approvals, and turnaround times.
- Keep security and compliance documentation organized, version-controlled, and regularly updated.
- Collaborate with IT, Legal, HR, and other departments to collect necessary information and evidence.
- Support internal and external audits, assessments, and control reviews as needed.
- Identify recurring queries and contribute to building a library of standard, pre-approved responses to improve efficiency.

Required Qualifications

- Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related discipline.
- 3 to 5 years of experience in IT compliance, information security compliance, Governance, Risk, and Compliance (GRC), or security assurance roles.
- Strong knowledge and practical experience in the information security domain, including security policies, risk management, security controls, and best practices.
- Familiarity with industry frameworks and standards such as ISO 27001, SOC 2, NIST, and GDPR.
- Understanding of general IT controls including access management, change management, backup and disaster recovery, and vulnerability management.
- Experience in completing customer security questionnaires and supporting audit processes.
- Excellent written communication skills, with the ability to explain complex technical and compliance topics clearly and concisely.
- High attention to detail and strong document control capabilities.
- Ability to manage multiple requests simultaneously and meet strict deadlines.

Preferred Qualifications

- Professional certifications such as ISO 27001 Lead Implementer or Lead Auditor, Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Security+.
- Experience working with international or enterprise-level clients.
- Familiarity with Governance, Risk, and Compliance (GRC) platforms or ticketing tools.

This position offers the opportunity to work closely with various departments and contribute significantly to maintaining and enhancing the organization’s security posture and compliance standards. If you have a passion for information security and compliance, along with strong analytical and communication skills, this role will provide a challenging and rewarding environment to grow your career.