About the Role

OrthoFX, a high-growth US-based healthcare tech company, is hiring a Compliance Analyst to support our information security audit and risk management program. You'll work across ISO 27001, SOC 2 Type 2, and HIPAA frameworks — conducting internal audits, supporting external audits, and helping us stay ahead of evolving compliance requirements.

This is a compliance/audit-focused GRC role — not a penetration testing, red-team, or offensive security position.

What You'll Do
Support internal and external audits across ISO 27001, HIPAA, SOC 2 Type 2, and customer assessments
Conduct technical and non-technical information security assessments
Participate in risk assessments and document findings in the GRC system
Assist in vendor/third-party risk assessments (using tools like ServiceNow)
Track audit actions, findings, and remediation to closure
Collaborate with IT, Network, and Cloud teams on security assessments
Maintain and update compliance policies, procedures,



and dashboards
Review controls across access management, change management, patch management, and vulnerability remediation

What You Bring
Bachelor's degree in IT, Cybersecurity, or related field
1–3 years of hands-on experience in Information Security Audits or Compliance (not general IT, not financial/AML compliance)
Working knowledge of ISO 27001, SOC 2, HIPAA — GDPR/NIST familiarity a plus
Exposure to GRC or ITSM tools (ServiceNow, Jira, Drata, Sprinto, Vanta, or similar)
Solid documentation and audit-reporting skills
Certifications like ISO 27001 LI/LA or CISA are a plus, not mandatory

Why OrthoFX
High-growth US-based healthcare tech company
Work on products that directly touch patient lives
Cooperative, transparent, inclusive culture
Real room to grow as the company scales

📌 Compliance Analyst – Iso 27001 / Soc 2 / Hipaa Kochi (India)
🏢 OrthoFX
📍 India