Role: Technology Compliance Analyst

Location: Gurgaon, India

Responsibilities:

• Provide assistance with the execution, monitoring and testing of the company’s IT global compliance policies and procedures
• Ensures accurate identification, communication, and mitigation of risks, processes, and internal control gaps with potential adverse operational, financial, strategic and compliance risk implications.
• Own the follow up on action plans to ensure appropriate and timely mitigation of identified risks.
• Work with IT and Engineering stakeholders in auditing current procedures and policies, analyze results, and identify remediation activities
• Assist in developing metrics to measure and track compliance, risk and the effectiveness of the IT cyber security compliance program
• Coordinate response to 3rd party security questionnaires 
• Drive company Business Continuity planning, Disaster Recovery, Security Incident Response planning and tabletop exercises
• Assists in the design of automation to enable scalability of the compliance 
• Create and maintain data and documentation chronicling company compliance with policies, standards, and regulations

You have:

• 3- 5 years of experience in technical audit and/or security
• University degree in Technology, Engineering, Business or equivalent.
• Hands-on experience reviewing and testing common IT & Engineering technologies including OS, databases, network infrastructure, application security, identity framework, Linux/Windows system security, networking, mobile device security, cloud technologies and applications (IaaS, IDaaS, SaaS, PaaS environments, etc.).
• Hands on experience assessing security and compliance risks and controls in technology processes, cloud applications, cloud infrastructure, and on-prem infrastructure.
• Experience formulating audit testing plans, steps, and procedures.
• Strong audit documentation skills.
• Ability to work independently, multitask and lead multiple projects to a timely completion.
• Experience implementing and/or auditing controls from common industry and regulatory frameworks and standards (e.g., NIST-CSF. CIS-CSC, SOC I & II, ISO 27001, PCI-DSS, OWASP, ITIL, etc.) are a plus.