Senior Security Compliance Analyst

Apexon; Ahmedabad District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Apexon in Gujarat, India seeks a Senior Security Compliance Analyst with 4–5 years of IT compliance and audit experience. You will lead audits for ISO 27001, PCI DSS, GDPR, and HITRUST, and prepare supporting documentation across projects.

Role requires strong collaboration with auditors and tech teams, robust evidence management, and the ability to drive readiness for external audits while updating policies and procedures annually.

Qualifications

• Minimum 4 years of experience in IT Compliance, Information Security, or IT Auditing.
• Hands-on with HITRUST CSF (e1, i1, r2), SOC 2, or PCI DSS.
• Proven experience with ISO 27001, PCI DSS, GDPR, and NIST.
• Experience managing cloud security, governance and compliance.
• Strong audit documentation, evidence management and records.
• Excellent communication skills in fluent English.
• Familiar with HIPAA, PCIDSS, GDPR and other data protection laws.

Responsibilities

• Lead and execute ISO 27001, PCI DSS, GDPR, and HITRUST assessments and audits.
• Prepare HITRUST workpapers and related documentation.
• Ensure timely internal security audits and follow up on findings.
• Organise documentation and evidence for audits.
• Act as liaison between auditors and technology teams.
• Be the single point of contact for audit teams and responses.
• Review IT controls including risk assessments and firewall reviews.
• Drive readiness for external audits and maintain policies annually.
• Support GRC activities, prepare exec reviews, respond to client requirements.
• Draft responses for client-initiated assessments and risk reviews.

Skills

ISO 27001

PCI DSS

GDPR

NIST

HITRUST CSF

SOC 2

Education

BE/BTech/ MBA (IT)

Computer Science

BCA

BCS

Cyber Security Specialization

Job description

Role- Senior Security Compliance Analyst

Experience Range (Min to Max): 4 to 5 Years

Responsibilities / Duties: (in brief)

• Lead and execute ISO 27001, PCI DSS, GDPR, HiTrust (e1, i1, r2) assessments and audits, Conduct Control Testing and Evidence Validation.
• Prepare and maintain HITRUST workpapers and related documentation in line with required methodologies
• Ensure timely completion of Internal Security Audits, submit reports, and follow up for closure of findings across functions and delivery projects.
• Organising documentation and evidence to support internal and external IT audits
• Acting as the primary liaison between internal and external auditors and technology teams
• Serving as the single point of contact for audit teams, ensuring consistent responses, evidence, and documentation across applications and audit topics
• Review and verify IT controls for PCI DSS & ISO 27001, including risk assessments, policy updates, incident analysis, and firewall rule reviews.
• Drive readiness for external audits (HITRUST (e1, i1, r2), ISO 27001, PCI DSS) and maintain updated policies and procedures annually.
• Support GRC Activites, prepare executive review PPTs, and respond to client security requirements and RFPs as needed, Conduct Customer Compliance Audits and reviews, Report ISMS Performance Metrics, Conduct Risk Assessments, Risk Reporting and Risk Monitoring.
• Draft Responses for Client Initiated Security Assessments, Risk Assessments and Audits, and support in successful clearance.

Work Experience Requirements:

• Minimum 4 years of experience in IT Compliance, Information Security, or IT Auditing within enterprise environments
• Hands-on experience with atleast one out of HITRUST CSF assessments (e1, i1, r2), SOC 2 (Trust Services Criteria), OR PCI DSS 4.0.1 QSA Assessment.
• Proven experience working with compliance frameworks and standards such as ISO 27001, PCI DSS, GDPR, NIST.
• Hands-on experience managing cloud security, governance, and compliance requirements across modern technology environments
• Strong experience maintaining audit documentation, controls evidence, and compliance records for internal and external audits
• Demonstrated ability to collaborate with auditors, stakeholders, and cross-functional teams to drive successful compliance and audit outcomes
• Excellent communication skills with fluent English proficienc
• Familiarity with regulatory environments such as HIPAA, PCIDSS, GDPR and other data protection laws.

Education requirement:

BE/BTech/ MBA (IT), Computer Science, BCA, BCS, Cyber Security Specialization