About Us
At PeopleLC, we are the architects behind the teams building the future at our Client partners. We design, deploy, and manage the highly sophisticated screening, assessment ecosystem, and career management that evaluates every single engineer, professionals, and leaders applying to work at the Client place. We don't just look for professionals; we use advanced behavioral, technical, and psychological data models to identify the exact quadrant of engineering and workforce excellence required for our Client's success. PeopleLC is a premier career management, HMTR, AI resources, and workforce solutions firm. We act as the strategic architecture partner for high-innovation companies Description Our Client is building the future of work, innovating on our customers ’behalf across industries including healthcare, financial services, transportation and supply chain, and retail. We are crafting a unique workplace culture that combines data-driven rigor, relentless customer obsession, and high ownership with innovation and employee-centric creativity. We work hard, iterate fast, and care deeply about building a supportive, elite team. Description Our Client is looking for a Compliance / Security Analyst to help build and run the security and compliance program that our customers depend on. They serve healthcare, financial services, transportation, and retail organizations, and their trust in our platform rests on the strength of our controls. We are in the middle of our SOC 2 and ISO 27001 journeys and growing quickly after a recent merger. You will own day-to-day control operations, drive audit readiness, answer customer security reviews, and help mature our security posture as we scale. This is a high




- ownership role with direct visibility to executive leadership. Key Job Responsibilities Operate and continuously monitor controls for SOC 2 (Type 1 and Type 2) and ISO 27001, including evidence collection, control testing, and remediation tracking. Serve as the primary point of contact for external auditors and certification bodies, coordinating requests and timelines across teams. Maintain the information security management system (ISMS): policies, procedures, risk register, Statement of Applicability, and internal audit schedule. Own and improve our GRC tooling and automate evidence collection wherever possible. Complete customer security questionnaires, due diligence requests, and contract security requirements, including HIPAA and financial services expectations. Run third-party and vendor risk assessments and track vendor compliance. Lead periodic access reviews, security awareness training, and policy attestation campaigns. Support vulnerability management, security monitoring, and incident response, including tracking findings through to closure. Help integrate acquired teams and systems into our control setting. Note on your contact details and requirement PeopleLC reserve the right to share your contact details and profile with third parties for job matching, business requirements, and marketing or sales initiatives.



A day in work Your day could begin by checking the GRC dashboard for failing controls and pinging owners to fix a missed access review. Mid-morning you meet the ISO 27001 auditor to walk through a corrective action. In the afternoon you complete a security questionnaire for a healthcare prospect, then work with engineering to automate evidence for a change-management control so it never has to be collected by hand again. Basic Qualifications Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent experience. 3+ years of experience in security compliance, GRC, IT audit, or information security. Hands-on experience supporting SOC 2 and/or ISO 27001 audits from readiness through report. Working knowledge of cloud environments (AWS, Azure, or GCP) and common security controls such as IAM, logging, encryption, and change management. Strong written communication and the ability to manage many requests across teams with attention to detail. Preferred Qualifications Certifications such as CISA, CISSP, CISM, ISO 27001 Lead Implementer or Lead Auditor, or CompTIA Security+. Experience with HIPAA, HITRUST, PCI DSS, NIST CSF, or SOX ITGCs. Experience with GRC platforms such as Vanta, Drata, or Secureframe. Familiarity with SIEM, EDR, and vulnerability scanning tools. Scripting skills (Python or PowerShell) to automate evidence and reporting. Experience in a high-growth startup or a post-merger integration. Our Client is an equal opportunity employer. They value diversity and do not discriminate on the basis of race, religion, color, national origin, sex, gender identity, sexual orientation, age, marital status, veteran status, disabilities.

📌 Senior Compliance (Hyderabad)
🏢 PeopleLC
📍 Hyderabad