Compliance and Security Analyst

We are seeking an experienced IT Compliance and Security Analyst with a strong background in information security. In this role, you will handle compliance and security-related inquiries from both internal teams and external customers. Your responsibilities will include reviewing each request carefully, preparing accurate and policy-supported responses, obtaining approval from the Chief Information Security Officer (CISO), and delivering the approved information to the requester in a timely manner. This position requires a detail-oriented professional who can manage multiple requests efficiently while maintaining up-to-date documentation and ensuring alignment with security standards.

Key Responsibilities

- Receive and review compliance and security queries from internal stakeholders and external customers, addressing questions related to documents, policies, and services.
- Utilize your information security expertise to assess each query and ensure responses accurately reflect the organization’s security controls and practices.
- Conduct thorough research to identify relevant policies, procedures, certifications, and supporting evidence for each inquiry.
- Draft clear, precise, and comprehensive responses, including security questionnaires, due diligence requests, and audit-related questions.
- Share approved responses and documentation with requesters within agreed timelines to maintain transparency and trust.
- Maintain a detailed tracker of incoming requests, including status updates, approvals, and turnaround times to ensure efficient workflow management.
- Keep security and compliance documentation well-organized, version-controlled, and current to support audit readiness and internal reviews.
- Collaborate with cross-functional teams such as IT, Legal, and HR to gather necessary information and evidence for compliance purposes.
- Support internal and external audits, assessments, and control reviews by providing accurate and timely information.
- Identify recurring queries and contribute to building a library of standard, pre-approved responses to streamline future communications.

Required Qualifications

- Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related discipline.
- 3 to 5 years of experience in IT compliance, information security compliance, Governance, Risk, and Compliance (GRC), or security assurance roles.
- Strong knowledge and hands-on experience in the information security domain, including familiarity with security policies, risk management, security controls, and best practices.
- Working knowledge of industry frameworks and standards such as ISO 27001, SOC 2, NIST, and GDPR.
- Understanding of general IT controls, including access management, change management, backup and disaster recovery, and vulnerability management.
- Proven experience in completing customer security questionnaires and supporting audit processes.
- Excellent written communication skills, with the ability to clearly explain technical and compliance-related topics to diverse audiences.
- Strong attention to detail and effective document control practices to maintain accuracy and compliance.
- Ability to manage multiple requests simultaneously and meet strict deadlines.
- Relevant certifications such as ISO 27001 Lead Implementer or Lead Auditor, Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Security+ are highly desirable.
- Experience working with international or enterprise-level clients is preferred.

This role offers the opportunity to work at the intersection of IT security and compliance, contributing to the organization’s risk management and governance efforts. If you have a passion for information security and compliance and enjoy collaborating across departments to ensure robust security practices, this position is an excellent fit.