Security Compliance Analyst

Captalent Hr; Indore District, Gurugram District, Mumbai; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Captalent Hr is seeking a Senior Security Compliance Analyst to lead security assessments, monitoring, and audit reporting for our corporate environment. You will drive remediation and risk mitigation across PCI DSS, SOC 2, HIPAA/HITRUST, and ISO 27001 controls, ensuring policy compliance for endpoints, networks, and systems.

The role requires hands-on expertise in application security controls, risk assessments, and strong technical writing.

Qualifications

• Bachelor's degree in MIS/Computer Science or Business, or equivalent experience.
• 6+ years in IT security/compliance with at least 3 years in IT security, audits, risk assessments or due diligence.
• Deep knowledge of PCI DSS, SOC 2, HIPAA/HITRUST, SOX ITGC, and ISO 27001/27017/27018.
• Hands-on with cloud architecture, servers, OS security, networking, and security tooling.

Responsibilities

• Conduct security system assessments, monitoring, and reporting.
• Lead audits and remediation efforts across the organization.
• Assess and integrate security controls per PCI DSS, SOC 2, HIPAA/HITRUST, and ISO standards.
• Ensure policy compliance for endpoints, networks, hardware, and software.

Skills

IT Security Compliance

Audit & Risk

Vendor Security

Application Security

Technical Writing

Interpersonal Skills

Confidentiality Handling

Security Certifications

Education

Bachelor's in MIS/CS or Business

Tools

SIEM Tools

NAT Security Tools

Vulnerability Assessment Tools

Job description

Role & responsibilities

Overview:

The Senior Security Compliance Analysts responsibilities include security system assessments, monitoring, and reporting. This position will have a significant role in performing audits, tracking vulnerability assessments, security testing, and working with operations teams on remediation and mitigation of audit findings. The Senior Security Compliance Analyst will be leading the assessment and integration of security controls of the entire corporate environment in line with applicable requirements from PCI DSS, SOC 2, HIPAA/HITRUST, and ISO 27001. This individual will also be responsible for policy assessment of endpoint and network security appliances, hardware, and software, enforcing the company security policies, and complying with internal and external security audit requirements and recommendations.

Shifting: General Shift. Work mode: Hybrid (Visit office on an as-needed basis)

Work location: Gurugram, NaviMumbai, Noida, Indore, Mohali

Preferred candidate profile

Qualifications:

• Bachelors degree in MIS/Computer Science or Business, and/or a combination of education and relevant experience.
• 6+ years of experience in IT/IS Security Compliance/Consulting, where a minimum of three years focused on IT security, IT audit, Risk Assessments, Vendor Security Assessments, and/or due diligence reviews.
• In-depth and hands-on experience with compliance requirements, including PCI DSS, SOC 2, HIPAA/HITRUST,SOX ITGC and ISO streams (such as ISO 27001, 42001, 27017, and 27018).
• Well-versed in technical domains, including:
  • Cloud Architecture, Server, and OS-level security.
  • Networking & Infrastructure, including network tools and protocols.
  • Security tools and platforms for SIEM, NAT, and VA/PT endpoints.
• Hands on experience in application security controls is mandatory.
• Strong understanding of Third-party, enterprise, network, system, and application-level risk and controls.
• An industry-recognized information security certification, such as CISSP, CISA, CCNA, CEH, ISO LA/LI, CISM, ISO 31000, Risk Professional, and Certified Third-Party Risk Professional.
• Sound technical writing, documentation, and communication skills are required.
• Ability to handle sensitive and/or confidential material and information with suitable discretion.
• Excellent interpersonal skills and a professional demeanor.
• BPO contact center experience is preferred but not required.