Onit

Senior InfoSec Compliance Analyst

Security and Compliance - Pune, Maharashtra, India - Full Time

Senior InfoSec Compliance Analyst

The Senior InfoSec Compliance Analyst will play a pivotal role in ensuring that Onit adheres to industry standards and regulatory requirements. This position involves analyzing, implementing, and maintaining compliance protocols, collaborating with internal teams, and providing strategic insights to enhance our security posture.

Responsibilities: 

  • Lead the planning and execution of security audits (e.g., ISO 27001, SOC 2, PCI DSS, HIPAA, NIST, GDPR).
  • Assess, implement, and maintain new compliance frameworks or controls, leading cross-functional projects for certifications or attestations (e.g., achieving new levels of SOC 2, ISO 27001, or industry-specific standards).
  • Lead compliance-related projects, including process improvements, tool implementations (e.g., GRC platforms), and policy roll-outs.
  • Oversee and coordinate penetration testing activities and manage third-party penetration testing vendors.
  • Complete and manage responses to customer security and privacy questionnaires, providing evidence of controls to support sales.
  • Perform risk assessments; document findings and collaborate with stakeholders to mitigate risks.
  • Develop, review, and maintain security policies, procedures, and standards.
  • Serve as the point of contact for compliance-related incidents and inquiries, conducting investigations and documenting findings.
  • Support vendor management by performing third-party security assessments
  • Mentor and coach junior analysts, promoting a team culture of knowledge-sharing and professional growth.
 

Qualifications/Skills

  • Bachelor’s degree in Information Security, Computer Science, or a related field.
  • Minimum of 6-8 years of experience in years of experience in information security compliance, risk management, or IT audit.
  • Proven experience managing and implementing major compliance frameworks (e.g., ISO 27001, SOC 2, NIST, PCI DSS, HIPAA, GDPR, etc.).
  • Hands-on experience with penetration testing oversight and third-party risk assessments.
  • Track record of leading or participating in successful compliance audits, certifications, and attestation projects.
  • Experience managing multiple compliance projects and initiatives simultaneously.
  • Ability to lead cross-functional teams and work collaboratively across departments.
  • Self-motivated and proactive, with strong organizational and time-management skills.
  • Strong analytical, investigative, and problem-solving skills.
  • Strong written and verbal communication skills.
  • Audit experience working with Enterprise SaaS software is a plus.
  • Auditing knowledge of AWS and cloud infrastructures a plus.
  • Professional certifications such as CISA, CISSP, or similar strongly desired.
Apply: Senior InfoSec Compliance Analyst
* Required fields
First name*
Last name*
Email address*
Location *
Phone number*
Resume*

Attach resume or Paste resume

Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or paste resume

Paste your resume here or attach resume file

Are you willing to relocate?*
How many years of professional experience do you have?*
How many years of experience do you have in information security compliance, risk management, or IT audit?*
Which compliance frameworks have you managed or implemented?*
Have you led or participated in audits or certification projects for any of the above frameworks?*
Do you have hands-on experience overseeing penetration testing and managing third-party pen test vendors?*
Describe the most challenging/complex technical problem that you solved for a project or that you worked on.*
Please list the certifications you have:*
What is your current CTC per annum (including any variable components)?*
What is your expected CTC per annum?*
What is your notice period? If you are on notice already, when are you available to join?*
Do you have a current non-compete agreement in place that would prevent you from working for either Onit, SimpleLegal, AXDRAFT, Bodhala, BusyLamp, SecureDocs?*
Human Check*