Information Security Compliance Analyst

Fluke Corporation; India; On-site; INR 1,200,000 - 1,600,000; Full time

Job summary

Fluke Corporation is seeking an Information Security Compliance Analyst to join our Information Security GRC team. This role involves supporting compliance programs across various frameworks, including SOX and ISO 27001, and assists in managing third-party risks and internal audits.

The ideal candidate will have 2+ years of relevant experience, strong organizational, and communication skills, and a knowledge of GRC platforms. This role is vital for maintaining compliance and ensuring effective practices across the global organization.

Qualifications

• 2+ years in compliance, GRC, or IT audit.
• Awareness of audit lifecycle and IT controls.
• Ability to handle multiple timelines effectively.
• Strong verbal and written communication.

Responsibilities

• Support compliance programs across multiple frameworks.
• Coordinate evidence collection and audit deliverables.
• Work with control owners to ensure compliance.
• Contribute to risk profile and metrics tracking.
• Support vendor security assessments and risk workflows.

Skills

Compliance, GRC, or IT audit experience

Knowledge of SOX ITGC/ITAC controls

ISO 27001, SOC 2, NIST 800-171 familiarity

Organizational skills

Clear communication skills

Self-starter mindset

Tools

GRC platforms (LogicGate, ServiceNow GRC, etc.)

Job description

Description

We're looking for an Information Security Compliance Analyst to join our Information Security GRC team. This role supports compliance programs across a global organization, spanning multiple regulatory frameworks, security certifications, and risk management initiatives. You'll also contribute to broader GRC efforts, including third‑party risk management, risk profile reporting, policy governance, and security compliance.

Responsibilities

• Support the execution and maintenance of compliance programs across multiple frameworks, including SOX, ISO 27001, SOC 2, CMMC, NIST 800-171, Cyber Essentials, EU Regulations, and other compliance requirements.
• Coordinate evidence collection, control testing, and audit deliverables for both internal and external audits, ensuring timely, accurate, and audit‑defensible responses.
• Work with control owners across IT, Finance, and business teams to ensure controls are performed on schedule and documentation meets quality standards.
• Contribute to the organization's risk profile, helping track, report, and improve security and compliance metrics.
• Support third‑party risk management activities, including vendor security assessments and risk acceptance workflows.
• Assist in maintaining and operating the organization's GRC platform for controls management, risk assessments, and policy exceptions.
• Conduct periodic reviews of compliance controls, processes, and procedures to identify gaps and drive continuous improvement.
• Provide guidance and support to control owners on evidence requirements, control design, and audit readiness.
• Collaborate with cross‑functional teams to ensure compliance programs are integrated and aligned with business objectives.
• Stay current on regulatory changes, industry standards, and evolving compliance requirements to keep programs effective.

Qualifications

Required

• 2+ years of experience in a compliance, GRC, or IT audit role.
• Working knowledge of SOX ITGC/ITAC controls and the audit lifecycle.
• Familiarity with at least two of the following: ISO 27001, SOC 2, NIST 800-171, CMMC, Cyber Essentials.
• Strong organizational skills, ability to manage multiple audit timelines, deliverables, and stakeholders simultaneously.
• Clear written and verbal communication skills; able to translate compliance requirements for technical and non‑technical audiences.
• Self‑starter with a continuous improvement mindset.

Preferred

• Experience with GRC platforms (e.g., LogicGate, ServiceNow GRC, AuditBoard, or similar).
• Exposure to cloud security compliance (AWS, Azure) or vulnerability management programs.
• Experience supporting external audits.
• Familiarity with third‑party risk management processes.
• Relevant certifications (CISA, CRISC, ISO 27001 Lead Auditor, Security+, or similar) are a plus but not required.

Equal Opportunity Employment

We Are an Equal Opportunity Employer. Fortive Corporation and all Fortive Companies are proud to be equal opportunity employers. We value and encourage diversity and solicit applications from all qualified applicants without regard to race, color, national origin, religion, sex, age, marital status, disability, veteran status, sexual orientation, gender identity or expression, or other characteristics protected by law. Fortive and all Fortive Companies are also committed to providing reasonable accommodations for applicants with disabilities. Individuals who need a reasonable accommodation because of a disability for any part of the employment application process, please contact us at [e-mail].