Security Compliance Analyst

Generac Captiva Pvt. Ltd.; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Generac Power Systems Inc. is seeking an experienced professional to support ISMS operations, governance, and audit readiness.

You will coordinate cross-framework compliance activities, maintain the Generac Controls Framework, and drive evidence quality and traceability across control owners. You will collaborate with risk, privacy, and incident-response teams to align on governance decisions, prepare readiness assessments for emerging regulations, and help implement automation and improvements

Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, Information Technology, or related field.
• Foundational certifications are assets (e.g., ISO 27001 Lead Implementer/Lead Auditor, CISA).
• 4 years of experience in security compliance, GRC operations, ISMS support, or control assurance in an enterprise environment.
• Experience coordinating compliance activities across ISO 27001, SOC 2, NIST-based frameworks, or CMMC.

Responsibilities

• Support operation of ISMS foundational layer aligned with Generac’s Compliance & Governance model.
• Govern enterprise compliance governance across ISO 27001, NIST CSF 2.0, NIST 800-171, TX-RAMP, and other frameworks.
• Operate and maintain the Generac Controls Framework (GCF) including mappings and evidence expectations.
• Coordinate internal and external audit activities and support evidence validation.
• Govern exception and corrective action lifecycle, tracking and closure.
• Produce enterprise compliance KPIs, dashboards, and governance communications.
• Operate enterprise compliance tooling and workflows, supporting automation and auditability.

Skills

Security governance

ISMS support

Risk management

Audit coordination

Documentation

Cross-functional collaboration

Cloud compliance

GRC tooling

Education

Bachelor's degree in Information Security

Tools

GRC platforms

Compliance tooling

Job description

Major Responsibilities

• ISMS Operations & Governance
  • Support the operation of the enterprise ISMS foundational layer in alignment with Generac’s Compliance & Governance operating model.
  • Govern enterprise compliance governance activities across ISO 27001, NIST CSF 2.0, NIST 800-171, TX-RAMP, and other applicable frameworks.
  • Leverage authoritative outputs from Risk Management, Privacy, and Incident Response to inform governance decisions and prioritization.
• Framework, Controls & Evidence Management
  • Operate and maintain the common Generac Controls Framework (GCF), including control mappings, applicability logic, and evidence expectations.
  • Govern the quality, completeness, and traceability of compliance evidence across all enterprise control owners.
  • Maintain authoritative enterprise registers for controls, requirements, evidence, exceptions, corrective actions, and assessments.
  • Support readiness assessments for emerging regulatory frameworks impacting connected products and digital systems (e.g., EU Cyber Resilience Act), including control mapping and evidence expectations.
• Assessment & Audit Readiness
  • Facilitate enterprise compliance assessments, readiness reviews, and surveillance activities.
  • Coordinate internal and external audit activities and support auditor engagement and evidence validation.
  • Ensure enterprise frameworks and evidence expectations support regulated and contractual obligations while execution remains with designated business-unit compliance teams.
• Exceptions & Corrective Actions
  • Govern the enterprise exception and corrective action lifecycle, including intake, approval workflows, tracking, and closure assurance.
  • Monitor systemic issues, exception trends, and remediation effectiveness across the enterprise.
• Reporting, Communication & Enablement
  • Produce enterprise compliance KPIs, dashboards, and management-review inputs.
  • Provide governance guidance and communications to control owners to clarify expectations and evidence requirements.
  • Contribute to enterprise security and compliance maturity assessments and trend reporting (e.g., NIST CSF 2.0), including baseline establishment and re-assessment support.
• Tooling, Automation & Continuous Improvement
  • Operate enterprise compliance tooling and workflows.
  • Support automation and AI-governance guardrails to improve scale, consistency, and auditability.

Minimum Job Requirements

• Education
  • Bachelor’s degree (or higher) in Information Security, Cybersecurity, Information Technology, or a related field.
• Certification / License
  • No certification is required for this role.
  • Foundational certifications such as ISO 27001 Lead Implementer or Lead Auditor, CISA, or other GRC-related credentials are considered an asset.
• Work Experience
  • 4 years of experience in security compliance, GRC operations, ISMS support, or control assurance within an enterprise environment.
  • Experience actively supporting, coordinating, or facilitating compliance assessments or audit readiness activities in a governance or assurance capacity across frameworks such as ISO 27001, SOC 2, NIST-based frameworks, or CMMC.
  • Experience working within multi-framework compliance programs, including control mapping, evidence governance, and remediation tracking.
  • Experience coordinating compliance activities with distributed control owners and stakeholders across multiple business units or regions.
• Knowledge / Skills / Abilities
  • Strong understanding of security controls, compliance frameworks, and governance practices.
  • Familiarity with ISO 27001, NIST CSF, NIST 800-171 / CMMC, TXRAMP, and related regulatory or contractual standards.
  • Ability to interpret control requirements and assess the quality, completeness, and traceability of evidence provided by control owners.
  • Strong documentation, analysis, and workflow or register management skills supporting auditability and traceability.
  • Experience with enterprise compliance tooling, structured registers, or GRC platforms is beneficial.
  • Effective communication skills for working with cross-functional stakeholders across business units and regions.
  • Ability to manage multiple concurrent compliance activities and deadlines in a distributed enterprise environment.
  • High attention to detail with strong organization and follow-through.
  • Ability to work independently and collaboratively within a global team.
  • Understanding of cloud environments (AWS, Azure, GCP) and their compliance and shared-responsibility considerations.
  • Commitment to integrity, accuracy, and maintaining confidentiality of sensitive enterprise information.

We believe power is a promise - a shared commitment to be there for others when it matters most. For more than 65 years, we've turned big ideas into solutions that help protect homes, strengthen businesses and build a more resilient, efficient, sustainable energy future.

Ready to Power a Smarter World with us? As one of the leaders and largest suppliers of power generation equipment and technology, the work we do touches millions of lives. Employees at Generac are encouraged to be innovative and are valued as an integral part of our global team. Our challenging goals develop knowledgeable employees dedicated to helping continue Generac’s success. Generac provides individuals the opportunity to work in a fast-paced agile work environment where their work makes a difference in people’s lives and their own.