Role: Compliance Analyst

Exp: 1-2 Years

Work Mode: Mohali, WOrk form Office

Time: 10am - 8pm IST

Role Summary

RChilli is seeking a Compliance Analyst to support IT compliance, information security governance, and regulatory readiness across ISO/IEC 27001:2022, SOC 2 Type II, HIPAA, PCI DSS, and GDPR, with awareness of emerging

AI governance requirements such as the EU AI Act and ISO/IEC 42001 considered an advantage. The role involves maintaining compliance documentation and internal controls, supporting internal and external audits, reviewing departmental Standard Operating Procedures (SOPs), identifying compliance gaps, coordinating corrective actions,

and working with cross-functional teams to strengthen organizational compliance.

Key Responsibilities

 Support the development, implementation, and maintenance of compliance programs and controls covering

ISO/IEC 27001:2022, SOC 2 Type II, HIPAA, PCI DSS, GDPR, and other applicable requirements.

 Create, review, organize, and maintain policies, procedures, SOPs, standards, control records, and audit-ready evidence.

 Assist with periodic internal compliance reviews, control testing, risk assessments, gap identification, and remediation planning.

 Coordinate evidence collection, documentation, auditor requests, and follow-up activities for internal and external audits and assessments.

 Record audit findings, maintain action trackers, follow up with control owners, and verify completion of corrective and preventive actions.

 Plan and assist with SOP reviews across IT, HR, Operations, Finance, Sales, Marketing, and other departments; Audit and check that documented processes are accurate, current, and followed.

 Help teams draft, revise, standardize, and implement SOPs; document gaps, inefficiencies, and opportunities for process improvement.

 Prepare clear audit summaries, compliance status reports, risk observations,



and written recommendations for relevant stakeholders.

 Collaborate with department heads and cross-functional teams to gather requirements, maintain documentation,

and communicate findings and progress.

 Assist with compliance awareness and training initiatives and ongoing monitoring of internal policies, standards,

and regulatory requirements.

 Use or learn GRC platforms such as Drata, Vanta, or equivalent tools to maintain control evidence, tasks, and compliance records.

Must-have Skills

 Foundational understanding of information security compliance, internal controls, risk management, and audit processes.

 Working knowledge of ISO 27001 and familiarity with frameworks such as SOC 2 Type II, HIPAA, PCI DSS, or

GDPR.

 Ability to draft and review SOPs, policies, audit reports, checklists, and compliance evidence with solid attention to detail.

 Ability to identify gaps, track remediation items, and coordinate deliverables across multiple departments.

 Strong written and verbal communication, analytical thinking, organizational skills, and proficiency in MS Office.

Good-to-have Skills

 Hands-on experience with Drata, Vanta, or another governance, risk, and compliance (GRC) tool.

 Exposure to ISO 27001, SOC 2, HIPAA, PCI DSS, or GDPR audit preparation, evidence collection, or control implementation.

 Awareness of the EU AI Act, ISO/IEC 42001, and other AI governance or regulatory frameworks.

 Basic understanding of IT infrastructure, databases, networking, and data-protection practices.

Qualifications & Experience

 1–2 years of experience in compliance, information security governance, internal audit, risk management, SOP auditing, or a closely related area.

 Bachelor’s degree in IT, Information Security, Business, Law, or a relevant discipline preferred.

 Relevant certifications or training in information security auditing, ISO 27001, or compliance are an advantage,

not mandatory.

📌 Compliance Analyst (Sahibzada Ajit Singh Nagar)
🏢 RChilli
📍 Sahibzada Ajit Singh Nagar