The Senior Process and Compliance Analyst will Manage process & compliance activities to implement and maintain industry best compliance and security frameworks like ISO, CSA, SSAE18 SOC, NIST, FDA, NIS, TISAX etc. Focus is to drive consistency across QAD in maintaining compliance controls and in maintaining applicable regulatory compliance requirements in the areas of Information Security, Service Management, Risk Management, Business Continuity Management, Privacy Management, Quality Management System, etc.

Performs gap analysis for compliance standards upgrades and guides functional teams in implementing required controls, and in updating policy and procedures.

Conducts internal compliance audits and demonstrates controls during external compliance assessments.

Note: The role requires the person to work in between 11 am to 11 pm (any 9 hour shift)

Responsibilities:

Compliance Management:

- Manages and conducts internal process and security compliance audits
- Manages and participates in external compliance audits and presents evidence and controls
- Manages customer audit requests and coordinates with the global teams in gathering and presenting evidence
- Documents audit observations/findings and follows-up with the impacted parties for closure of the audit findings
- Performs gap analysis for certification upgrades and implements updates
- Keeps track of changes to regulatory requirements

Process/Policy Management:

- Ensures that process and policy documents meet the compliance control requirements
- Works with respective business teams to implement missing controls, and assist the teams to update policy/process documents
- Maintains compliance related registers like Risk, Continuous Improvements, etc.
- Delivers training as required to the global teams on various compliance frameworks




- Assists business functions in performing business impact analysis and in maintaining business continuity plans

Security/Quality/Risk assessment Questionnaires response:

- Works with the global business functions in responding to third party questionnaires

Continuous Learning:

- Proactively develops skill and knowledge on security and compliance standards and frameworks
- Stays attuned to changes in industry compliance and regulatory requirements Qualifications
- Education/Certification: Bachelor in Engineering, Computer Science, IT, ISO 27001, ISO 20000 Lead Auditor Certifications are preferred (or achieved within 12 months)
- Experience: 5+ years of Industry Experience that includes Compliance, Service and Security Managements, Cybersecurity best practice, etc.
- Familiarity with industry leading compliance frameworks (e.g. CSA STAR, SSAE18 SOC 1 / SOC 2, ISO 27001 , ISO 20000, ISO 9001, FDA, NIST, NIS 2, TISAX, etc.)
- Exposure to compliance audit process
- Process training delivery
- Computer skills:

1. Knowledge of System/Network security and business operations
2. Knowledge on Project Management methodology, training material preparation and spreadsheets are preferred
3. Positive business procedure writing skill

- Other knowledge or skills: :

1. Analytical and Problem Solving ability
2. Customer service skills and proven ability to perform in fast-paced environment
3. Good communication skills and ability to handle sensitive matters with tact and diplomacy
4. Able to work independently
5. Capable of exercising judgment and discretion while utilizing company policies and practices to determine appropriate actions.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Compliance Analyst (Pune)
🏢 QAD
📍 Pune