Senior Security Compliance Analyst

TaskUs; Sahibzada Ajit Singh Nagar; On-site; INR 1,800,000 - 3,000,000; Full time

Benefits offered by this job

Competitive salary

Comprehensive benefits package

Internal mobility and professional增长

Job summary

TaskUs seeks a Senior Security Compliance Analyst to lead audits, drive ISO 27001, SOC 2, PCI DSS, HIPAA/HITRUST, and other certifications. You will coordinate evidence, monitor compliance activities, and guide remediation with operations teams.

The role emphasizes risk assessments, policy development, and vendor security reviews. You will enable security controls across cloud and on-prem environments, support incident response, and stay abreast of regulatory changes to protect the

Qualifications

• Bachelor's degree in MIS/Computer Science or related field.
• 6+ years in IT security/compliance with at least 3 years in IT security, audits, risk assessments or vendor security.
• Experience with PCI DSS, SOC 2, HIPAA/HITRUST, ISO 27001/27017/27018.
• Strong knowledge of cloud and network security, SIEM, NAT, and endpoint security tools.
• Professional certifications such as CISSP, CISA, CISM or equivalent.
• Excellent technical writing and communication skills.
• Ability to handle sensitive information and maintain confidentiality.
• BPO contact center experience preferred but not required.

Responsibilities

• Lead and support security compliance certifications (ISO 27001, SOC 2, PCI DSS, HIPAA, HITRUST, etc.).
• Manage evidence collection for external audits and certifications.
• Monitor, document, and report compliance activities, and remediation progress.
• Perform internal audits, control testing, and gap assessments to assess compliance status.
• Develop, maintain, and enforce security policies, standards, and procedures.
• Provide leadership with guidance on compliance risks, emerging trends, and areas for improvement.
• Lead the development and maintenance of IT and Security Risk Assessment procedures and collaborate with business units to complete risk activities.
• Recommends and supports the deployment and use of additional security products and vendor assessments.
• Strong practical experience with Business Impact Analysis (BIA).
• Provide incident response support during security events and analyze system anomalies.
• Stay current with regulatory changes and industry best practices.

Skills

IT Security

IT Audit

Risk Assessments

Vendor Security Assessments

SOC 2

PCI DSS

Education

Bachelor's degree in MIS/CS

Tools

SIEM

NAT

VA/PT endpoints

Cloud Security

Job description

Job Description

About TaskUs:

TaskUs is a provider of outsourced digital services and next-generation customer experience to fast-growing technology companies, helping its clients represent, protect and grow their brands. Leveraging a cloud-based infrastructure, TaskUs serves clients in the fastest-growing sectors, including social media, e-commerce, gaming, streaming media, food delivery, ride-sharing, HiTech, FinTech, and HealthTech. The People First culture at TaskUs has enabled the company to expand its workforce to approximately 60,000 employees globally. Presently, we have a presence in twenty-three locations across twelve countries, which include the Philippines, India, and the United States. It started with one ridiculously good idea to create a different breed of Business Processing Outsourcing (BPO)! We at TaskUs understand that achieving growth for our partners requires a culture of constant motion, exploring new technologies, being ready to handle any challenge at a moment's notice, and mastering consistency in an ever-changing world.

What We Offer:

At TaskUs, we prioritize our employees' well-being by offering competitive industry salaries and comprehensive benefits packages. Our commitment to a People First culture is reflected in the various departments we have established, including Total Rewards, Wellness, HR, and Diversity. We take pride in our inclusive environment and positive impact on the community. Moreover, we actively encourage internal mobility and professional growth at all stages of an employee's career within TaskUs. Join our team today and experience firsthand our dedication to supporting People First.

Overview

The Senior Security Compliance Analyst's responsibilities include security system assessments, monitoring, and reporting. This position will have a significant role in performing audits, tracking vulnerability assessments, security testing, and working with operations teams on remediation and mitigation of audit findings. The Senior Security Compliance Analyst will be leading the assessment and integration of security controls of the entire corporate environment in line with applicable requirements from PCI DSS, SOC 2, HIPAA/HITRUST, and ISO 27001. This individual will also be responsible for policy assessment of endpoint and network security appliances, hardware, and software, enforcing the TaskUs security policies, and complying with internal and external security audit requirements and recommendations.

Responsibilities

• Lead and support efforts for security compliance certifications such as ISO 27001, SOC 2, PCI DSS, HIPAA, HITRUST, and others.
• Manage evidence collection and responses for external audits and certifications.
• Monitor, document, and report compliance activities, make decisions regarding audit findings and remediation progress.
• Handling the Security Controls requirements in line with Client Expectations.
• Perform internal audits, control testing, and gap assessments to assess compliance status.
• Develop, maintain, and enforce security policies, standards, and procedures.
• Provide leadership with guidance on compliance risks, emerging trends, and areas for improvement.
• Provide security compliance training and awareness to employees.
• Lead the development and maintenance of IT and Security Risk Assessment procedures and processes, and collaborate with business units outside of Information Security to complete the Risk Assessment and track Risk Treatment activities.
• Recommends and supports the deployment and use of additional security products and tools, as well as conducting Risk Assessments and Vendor Security Assessments.
• Strong practical experience with Business Impact Analysis (BIA)
• Provide incident response support during security events. Participate in analyzing, troubleshooting, and investigating system anomalies using security reports, network traffic, logs, and alerts.
• Performs additional duties as assigned within the scope of security compliance activities and serves as a backup for team members in any necessary or assigned situations.
• Stay current with regulatory changes, emerging compliance requirements, and industry best practices.
• Manage the security of the IT infrastructure which are deployed and hosted in house and in the colocation DC.
• Should be able to use the AI tools and platforms for automation and also lead the core certification engagements we have in our Security Compliance department.

Qualifications

• Bachelor's degree in MIS/Computer Science or Business, and/or a combination of education and relevant experience.
• 6+ years of experience in IT/IS Security Compliance/Consulting, where a minimum of three years focused on IT security, IT audit, Risk Assessments, Vendor Security Assessments, and/or due diligence reviews.
• In-depth and hands‑on experience with compliance requirements, including PCI DSS, SOC 2, HIPAA/HITRUST,SOX ITGC and ISO streams (such as ISO 27001, 42001, 27017, and 27018).
• Well-versed in technical domains, including:
  • Cloud Architecture, Server, and OS-level security.
  • Networking & Infrastructure, including network tools and protocols.
  • Security tools and platforms for SIEM, NAT, and VA/PT endpoints.
• Hands on experience in application security controls is mandatory.
• Strong understanding of Third-party, enterprise, network, system, and application-level risk and controls.
• An industry-recognized information security certification, such as CISSP, CISA, CCNA, CEH, ISO LA/LI, CISM, ISO 31000, Risk Professional, and Certified Third-Party Risk Professional.
• Sound technical writing, documentation, and communication skills are required.
• Ability to handle sensitive and/or confidential material and information with suitable discretion.
• Excellent interpersonal skills and a professional demeanor.
• BPO contact center experience is preferred but not required.

How We Partner To Protect You:

TaskUs will neither solicit money from you during your application process nor require any form of payment in order to proceed with your application. Kindly ensure that you are always in communication with only authorized recruiters of TaskUs.

DEI:

In TaskUs we believe that innovation and higher performance are brought by people from all walks of life. We welcome applicants of different backgrounds, demographics, and circumstances. Inclusive and equitable practices are our responsibility as a business. TaskUs is committed to providing equal access to opportunities. If you need reasonable accommodations in any part of the hiring process, please let us know.

TaskUs is proud to be an equal opportunity workplace and is an affirmative action employer. We celebrate and support diversity; we are committed to creating an inclusive environment for all employees. TaskUs people first culture thrives on it for the benefit of our employees, our clients, our services, and our community.