Senior Security Compliance Analyst

Role- Senior Security Compliance Analyst
Job Location- Ahmedabad
Experience Range (Min to Max): 4 to 5 Years
Responsibilities / Duties: (in brief)
Lead and execute ISO 27001, PCI DSS, GDPR, HiTrust (e1, i1, r2) assessments and audits, Conduct Control Testing and Evidence Validation.
Prepare and maintain HITRUST workpapers and related documentation in line with required methodologies
Ensure timely completion of Internal Security Audits, submit reports, and follow up for closure of findings across functions and delivery projects.
Organising documentation and evidence to support internal and external IT audits
Acting as the primary liaison between internal and external auditors and technology teams
Serving as the single point of contact for audit teams, ensuring consistent responses, evidence, and documentation across applications and audit topics
Review and verify IT controls for PCI DSS & ISO 27001, including risk assessments, policy updates, incident analysis, and firewall rule reviews.
Drive readiness for external audits (HITRUST (e1, i1, r2), ISO 27001, PCI DSS) and maintain updated policies and procedures annually.
Support GRC Activites, prepare executive review PPTs, and respond to client security requirements and RFPs as needed, Conduct Customer Compliance Audits and reviews, Report ISMS Performance Metrics, Conduct Risk Assessments, Risk Reporting and Risk Monitoring.
Draft Responses for Client Initiated Security Assessments, Risk Assessments and Audits, and support in successful clearance.
Work Experience Requirements:
4 to 5 Years
Minimum 4 years of experience in IT Compliance, Information Security, or IT Auditing within enterprise environments
Hands-on experience with atleast one out of HITRUST CSF assessments (e1, i1, r2), SOC 2 (Trust Services Criteria), OR PCI DSS 4.0.1 QSA Assessment.
Proven experience working with compliance frameworks and standards such as ISO 27001, PCI DSS, GDPR, NIST.
Hands-on experience managing cloud security, governance, and compliance requirements across modern technology environments
Strong experience maintaining audit documentation, controls evidence, and compliance records for internal and external audits
Demonstrated ability to collaborate with auditors, stakeholders, and cross-functional teams to drive successful compliance and audit outcomes
Excellent communication skills with fluent English proficienc
Familiarity with regulatory environments such as HIPAA, PCIDSS, GDPR and other data protection laws.
Education requirement: BE/BTech/ MBA (IT), Computer Science, BCA, BCS, Cyber Security Specialization

Work arrangement
No