Compliance Analyst

HCLTech; Jigani; Hybrid; INR 900,000 - 1,500,000; Full time

Job summary

HCLTech invites an Information Security Compliance Analyst to strengthen governance across DC and cloud environments, shaping controls, policies, and monitoring to meet IT policy and regulatory requirements.

You will collaborate with security and IT teams, perform gap analyses, coordinate remediation with business units, and prepare for audits and reviews, driving timely risk mitigation. Strong communication and a proactive mindset are essential.

Qualifications

• Bachelor's degree in Computer Science or related field.
• 3-5 years of Compliance, Security or Audit experience, preferably in DC/Cloud environments.
• Experience with HIPAA, PCI, ISO 27001K is a plus.

Responsibilities

• Perform deficiency analysis and implement controls to meet IT policy and regulatory requirements in cloud environments.
• Escalate and resolve risks and issues as required.
• Communicate compliance effectiveness to Management on a schedule.
• Test adherence to policy and regulatory controls, procedures and standards.
• Coordinate with internal and external audit teams to ensure remediation.

Skills

Compliance

Security

Audit

Cloud

GRC

Policy

Risk

COBIT

NIST

Data-visualization

Education

Bachelor's degree in Computer Science

Tools

RSA Archer

SAP GRC

Job description

The Information Security Compliance Analyst must possess initiative and drive and have broad relevant technical knowledge for a cloud based environment. Good expertise and excellent written and verbal communication skills are also key attributes for the position. The Information Security Compliance Analyst must provide direction, coordination and operations planning to accomplish the technical compliance goals and objectives effectively.

Job Role and Responsibility

The Information Security Compliance Analyst should ensure the existence of appropriate security governance within the DC and Cloud and internally controlled environments (policy, procedures, baselines and monitoring); assessment of required controls, and testing of adherence to required policies, procedures and monitoring. The Information Security Compliance Analyst will collaborate with other members of the Security and IT teams to define appropriate and effective information security controls and will work with the various business units to implement them. The Information Security Compliance Analyst will also be responsible for performing gap analysis exercises while working collaboratively with Functional Business Unit and IT teams to implement required remediation effectively.

Essential functions for this role include:

• Perform a deficiency analysis and implement required controls to meet IT Policy and Regulatory Compliance requirements in a cloud environment.
• Escalate and resolve risks and issues as required.
• Communicate the compliance effectiveness to Management on a scheduled basis.
• Test for adherence to policy and regulatory controls, procedures and standards.
• Prepare for engagement reviews and quality assurance activities.
• Follow up on deficiencies identified in monitoring reviews, self-assessments, automated assessments, and internal and external audits to ensure appropriate remediation measures have been achieved timely.
• Perform impact analysis as needed where controls fail or are considered ineffective.
• Track mitigation steps and ensure that risks are managed appropriately and in a timely manner.
• Assist with other GRC activities as required.
• Provide ongoing guidance and consultation to the organization to promote a progressive and sustainable GRC compliance initiative.
• Assist with integrating policy and regulatory compliance requirements into the organizations processes (e.g., change control, mergers and acquisitions) and life cycle activities.
• Manages timelines, resources, project plans, action item logs, status reports and statistics to ensure milestones, goals and commitments are met.
• Work closely with both Internal and External audit teams.
• Lead control integration efforts with new or existing systems and supporting architecture.

Required Skills

• Bachelor s degree in Computer Science, or related discipline.
• 3-5 years of Compliance, Security or Audit 5 experience preferably in a DC / Cloud environment.
• HIPAA, PCI, ISO 27K experience a plus
• Strong understanding of application, network, operating system and core infrastructure security concepts.
• Excellent written and verbal communication skills.
• Effective negotiating and problem solving skills.
• Experience working with Internal and External Audit teams
• Proactive and detail orientated team player.
• Familiarity with common compliance frameworks such as COBIT, COSO, ISO 27001K, and industry recognized guidance such as NIST a plus
• Strong analytical, diagnostic, critical thinking skills
• Strong ability to represent data in graphical form

Preferred Skills

• Advanced security certifications like CISM, CISA, CISSP-ISSMP preferred
• RSA Archer GRC and SAP knowledge and experience highly desired
• Experience working with or utilizing the RSA Archer eGRC application a plus
• Experience with a large company and/or Big 4 accounting firm .