Infosec Analyst Audit & Compliance.

Position: Infosec Analyst Audit & Compliance

Experience: 3 to 10 years

Location: Pune

Key Responsibility Areas (KRA):

• Regulatory Compliance & Governance: Ensure adherence to ISO 27001, NIST, SOC 2, GDPR, HIPAA, and enforce security policies.
• Audit & Risk Management: Lead internal/external audits, manage compliance assessments, and drive risk mitigation.
• Incident Response & Compliance Monitoring: Work with Security Operations to monitor incidents, ensure compliance, and support investigations.
• Security Awareness & Training: Develop and implement training programs to strengthen cybersecurity culture.
• Vendor & Third-Party Security: Assess vendor security risks, ensure contract compliance, and enforce security standards.
• Business Continuity & Disaster Recovery (BCDR): Support security-related aspects of BCDR, ensuring compliance with recovery objectives.
• Critical Coordination & Availability: Be available during US business hours for audits, compliance discussions, and security escalations.

Roles & Responsibilities:

• Lead security audits, compliance initiatives, and regulatory assessments.
• Maintain security policies, documentation, and reporting for compliance readiness.
• Serve as the primary contact for auditors, legal teams, and regulatory bodies.
• Oversee remediation efforts for vulnerabilities and drive timely risk mitigation.
• Monitor security controls, drive continuous improvement, and align compliance with business objectives.
• Support security incidents and investigations related to compliance risks.
• Ensure availability for critical discussions, escalations, and audits during US hours.