Compliance and Security Analyst

We are seeking an experienced IT Compliance and Security Analyst with a solid background in information security. In this role, you will handle compliance and security-related inquiries from both internal teams and external customers. Your responsibilities will include reviewing each request carefully, preparing precise responses aligned with company policies and documentation, obtaining approval from the Chief Information Security Officer (CISO), and delivering the finalized responses to the requesters in a timely manner.

Key Responsibilities

- Receive and evaluate compliance and security queries from internal stakeholders and external customers concerning documents, policies, and services.
- Utilize your information security expertise to assess each query and ensure responses accurately represent the organization’s security controls and practices.
- Conduct thorough research to identify relevant policies, procedures, certifications, and supporting evidence for each inquiry.
- Draft clear, accurate, and comprehensive responses, including security questionnaires, due diligence requests, and audit-related questions.
- Share approved responses and documentation with requesters within agreed timelines.
- Maintain a detailed tracker of incoming requests, including their status, approvals, and turnaround times.
- Keep security and compliance documentation well-organized, version-controlled, and up to date.
- Collaborate with IT, Legal, HR, and other departments to gather necessary information and evidence.
- Support internal and external audits, assessments, and control reviews as required.
- Identify recurring queries and contribute to building a library of standard, pre-approved responses to streamline future requests.

Required Qualifications

- Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related discipline.
- Three to five years of experience in IT compliance, information security compliance, Governance, Risk, and Compliance (GRC), or security assurance roles.
- Strong knowledge and hands-on experience in the information security domain, including security policies, risk management, security controls, and best practices.
- Familiarity with industry frameworks and standards such as ISO 27001, SOC 2, NIST, and GDPR.
- Understanding of general IT controls, including access management, change management, backup and disaster recovery, and vulnerability management.
- Proven experience in completing customer security questionnaires and supporting audit processes.
- Excellent written communication skills, with the ability to clearly explain technical and compliance-related topics.
- High attention to detail and strong document control capabilities.
- Ability to manage multiple requests simultaneously and meet strict deadlines.
- Relevant certifications such as ISO 27001 Lead Implementer or Lead Auditor, Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Security+ are highly desirable.
- Experience working with international or enterprise-level clients is preferred.

This position offers the opportunity to work in a dynamic environment where your expertise in IT compliance and security will directly contribute to maintaining and enhancing the organization’s security posture. If you are detail-oriented, proactive, and possess strong communication skills, this role will allow you to leverage your knowledge while collaborating across multiple teams and supporting critical audit and compliance activities.