Role & responsibilities

Overview:

The Senior Security Compliance Analysts responsibilities include security system assessments, monitoring, and reporting. This position will have a significant role in performing audits, tracking vulnerability assessments, security testing, and working with operations teams on remediation and mitigation of audit findings.

The Senior Security Compliance

Analyst will be leading the assessment and integration of security controls of the entire corporate workplace in line with applicable requirements from PCI DSS, SOC 2, HIPAA/HITRUST, and ISO 27001. This individual will also be responsible for policy assessment of endpoint and network security appliances, hardware, and software, enforcing the company security policies, and complying with internal and external security audit requirements and recommendations.

Shifting: General Shift.

Work mode: Hybrid (Visit office on an as-needed basis)

Work location: Gurugram, Navi Mumbai, Noida, Indore, Mohali

Preferred candidate profile

Qualifications:

- Bachelors degree in MIS/Computer Science or Business, and/or a combination of education and relevant experience.
- 6+ years of experience in IT/IS Security Compliance/Consulting, where a minimum of three years focused on IT security, IT audit, Risk Assessments, Vendor Security Assessments,



and/or due diligence reviews.
- In-depth and hands-on experience with compliance requirements, including PCI DSS, SOC 2, HIPAA/HITRUST,SOX ITGC and ISO streams (such as ISO 27001, 42001, 27017, and 27018).
- Well-versed in technical domains, including:
- Cloud Architecture, Server, and OS-level security.
- Networking & Infrastructure, including network tools and protocols.
- Security tools and platforms for SIEM, NAT, and VA/PT endpoints.
- Hands on experience in application security controls is mandatory.
- Strong understanding of Third-party, enterprise, network, system, and application-level risk and controls.
- An industry-recognized information security certification, such as CISSP, CISA, CCNA, CEH, ISO LA/LI, CISM, ISO 31000, Risk Professional, and Certified Third-Party Risk Professional.
- Sound technical writing, documentation, and communication skills are required.
- Ability to handle sensitive and/or confidential material and information with suitable discretion.
- Excellent interpersonal skills and a professional demeanor.
- BPO contact center experience is preferred but not required.

Interested candidates can send their resumes to [email protected] Regards,

HR Manager

📌 Security Compliance Analyst (Bengaluru)
🏢 CAPTALENT HR
📍 Bengaluru