Information Security and Compliance Analyst

Genpact Ltd.; Bengaluru; Remote; INR 900,000 - 1,500,000; Full time

Job summary

Genpact Ltd. in Bengaluru, India, seeks an Information Security and Compliance Analyst to support our Information Security Management System and drive SOX and ISO 27001 compliance efforts. You will analyze vulnerability findings and coordinate remediation with IT and owners while maintaining clear documentation for audits.

The role requires strong written communication, experience with audit responses, and the ability to manage complex documentation in a global, remote-enabled environment.

Qualifications

• 3+ years of information security or IT/compliance experience.
• Experience supporting SOX/ISO 27001 or similar.
• Familiarity with vulnerability management tools.
• Excellent audit responses and documentation skills.
• Meticulous attention to detail with deadline-driven work.
• Comfortable in a remote/distributed team environment.

Responsibilities

• Coordinate and track SOX and ISO 27001 compliance efforts including control reviews and evidence collection.
• Analyze vulnerability findings and coordinate remediation with IT/app owners.
• Serve as the point of contact for auditors and internal stakeholders.
• Develop security policies, procedures, and user guidance.
• Generate reports and dashboards for leadership and auditors.
• Maintain a central repository of compliance documentation and policies.
• Track exceptions and drive risk mitigation strategies.
• Assist in security awareness and training materials.

Skills

Written communication

Documentation management

Remote work

Education

Bachelors in CS/MIS

Tools

JIRA

Confluence

SharePoint

AWS

Azure

Vulnerability tools

Job description

Job Title: Information Security and Compliance Analyst

Introduction

Reporting to the IT Security and Compliance lead, the person in this role will support our Information Security Management System and be instrumental in driving and organizing our ongoing SOX and ISO 27001 compliance efforts. This person will help analyze and track vulnerability findings and conduct vulnerability management efforts. The Ideal candidate will have exceptional written communication skills and the ability to manage complex documentation and audit requests. We are looking for a person with a passion for ensuring security best practices are followed consistently across the organization.

What You'll Be Doing and the Impact You'll Make:

• Coordinate and track SOX and ISO 27001 compliance efforts, including control reviews, evidence collection, process documentation, and internal readiness assessments
• Experience with security configuration and knowledge of cloud service administration including AWS and Azure
• Organize and conduct comprehensive searches to determine the applicability of data security policies to client contracts
• Serve as the point of contact for auditors and internal stakeholders during compliance reviews, ensuring clear and timely communication
• Maintain and organize a central repository of compliance documentation, policies, and procedures with a high standard of clarity and accuracy
• Review, triage, and analyze vulnerability findings from internal scans and external tools; prioritize and categorize based on risk and potential business impact.
• Work closely with IT and application owners to coordinate remediation efforts, follow up on open vulnerabilities, and ensure timely resolution
• Assist in developing security policies, procedures, and user guidance aligned with industry best practices
• Generate concise and meaningful reports and dashboards for internal leadership and auditors
• Track exceptions, manage control gaps, and help drive risk mitigation strategies
• Contribute to security awareness and training efforts by preparing clear documentation and guidance materials

What We'd Love to See:

• 3+ years of experience in information security, IT compliance, or related roles
• Demonstrated experience supporting or managing SOX, ISO 27001 or similar compliance activities
• Familiarity with vulnerability management tools
• Outstanding written communication skills, especially in drafting audit responses, procedures, and internal documentation
• Meticulous attention to detail, with a strong ability to manage and organize complex deadline-driven tasks
• Comfortable working independently in a remote or distributed team environment.

Preferred Qualifications

• Certifications such as CISA, ISO 27001 Implementation, CISSP, or Security+
• Experience working with compliance frameworks such as NIST, GDPR, or SOC 2
• Prior experience in a multinational or regulated environment.
• Familiarity with project tracking tools (e.g. JIRA, Confluence, SharePoint).
• This is a global role requiring frequent flexibility for meetings with US-based colleagues.
• Role may include occasional after-hours (or before-hours) support during incidents or critical remediation windows.

Work Environment and Expectations

• This is a global role requiring frequent flexibility for meetings with US-based colleagues
• Role may include occasional after-hours (or before-hours) support during incidents or critical remediation windows

Required Education:

Bachelor's Degree in Computer Science, MIS, or related field.