Senior Security Compliance Analyst

Role- Senior Security Compliance Analyst

Job Location- Ahmedabad

Experience Range (Min to Max): 4 to 5 Years

Responsibilities / Duties: (in brief)

1. Lead and execute ISO 27001, PCI DSS, GDPR, HiTrust (e1, i1, r2) assessments and audits, Conduct Control Testing and Evidence Validation.
2. Prepare and maintain HITRUST workpapers and related documentation in line with required methodologies
3. Ensure timely completion of Internal Security Audits, submit reports, and follow up for closure of findings across functions and delivery projects.
4. Organising documentation and evidence to support internal and external IT audits
5. Acting as the primary liaison between internal and external auditors and technology teams
6. Serving as the single point of contact for audit teams, ensuring consistent responses, evidence, and documentation across applications and audit topics
7. Review and verify IT controls for PCI DSS & ISO 27001, including risk assessments, policy updates, incident analysis, and firewall rule reviews.
8. Drive readiness for external audits (HITRUST (e1, i1, r2), ISO 27001, PCI DSS) and maintain updated policies and procedures annually.
9. Support GRC Activites, prepare executive review PPTs, and respond to client security requirements and RFPs as needed, Conduct Customer Compliance Audits and reviews, Report ISMS Performance Metrics, Conduct Risk Assessments, Risk Reporting and Risk Monitoring.
10. Draft Responses for Client Initiated Security Assessments, Risk Assessments and Audits, and support in successful clearance.

Work Experience Requirements:

4 to 5 Years

• Minimum 4 years of experience in IT Compliance, Information Security, or IT Auditing within enterprise environments
• Hands-on experience with atleast one out of HITRUST CSF assessments (e1, i1, r2), SOC 2 (Trust Services Criteria), OR PCI DSS 4.0.1 QSA Assessment.
• Proven experience working with compliance frameworks and standards such as ISO 27001, PCI DSS, GDPR, NIST.
• Hands-on experience managing cloud security, governance, and compliance requirements across modern technology environments
• Strong experience maintaining audit documentation, controls evidence, and compliance records for internal and external audits
• Demonstrated ability to collaborate with auditors, stakeholders, and cross-functional teams to drive successful compliance and audit outcomes
• Excellent communication skills with fluent English proficienc
• Familiarity with regulatory environments such as HIPAA, PCIDSS, GDPR and other data protection laws.

Education requirement: BE/BTech/ MBA (IT), Computer Science, BCA, BCS, Cyber Security Specialization