Information Security Analyst

Job Description

Role Summary We are seeking a skilled Information Security Compliance Analyst with technical and audit experience in cloud environments, application, website security, and operational processes. This role requires working 75% US hours to coordinate effectively with our global team. 𝐂𝐨𝐧𝐧𝐞𝐜𝐭 7976457434 𝐬𝐮𝐫𝐞𝐬𝐡.𝐛@𝐬𝐲𝐧𝐚𝐩𝐨𝐧𝐞.𝐜𝐨𝐦 Job Description • Maintain relationships with Technology and Business teams • Conduct control reviews for IT applications, infrastructure, and product releases • Coordinate between the external auditors and internal stakeholders for evidence requests. This would include (and not limited to) facilitating meetings, reviewing evidence and plan remediations • Review and map policies to internal controls and work with process owners to ensure procedure documents are maintained • Monitor regulatory changes and support legal department with compliance challenges • Manage compliance and regulatory requests. Plan and coordinate delivery across teams • Review information security policies and procedures from compliance standpoint, suggesting changes as needed • Facilitate communication across audit levels to achieve goals. Oversee compliance monitoring and testing Knowledge, Skills, and Abilities (KSAs): • Strong written and verbal communication • Organized, inventive, and detail-oriented problem solver • Knowledge of security frameworks like NIST, SOC 2, ISO27001 and PCI • Ability to design and recommend security controls based on industry standards • Proficiency in testing and validating controls for Identity Access • Experience with privacy controls and regulations (GDPR, CCPA) • Vendor risk management for cloud providers (AWS, Azure, GCP) Experience & Education: • Minimum of 1-3 years of experience in IT Security compliance. • Experience with SOC2 and ISO 27001. • IT compliance assessments for medium-sized companies. • Essential working hours: 75% US hours to align with global team operations. • Having any of the relevant certifications like CISA, CISM, CISSP, ISO 27001 Lead Auditor/Implementer are not a must but would be advantageous