Security & Compliance Analyst

Job Description

Requirements Description and Requirements Audit & Compliance Management: Lead SOC2, ISO 27001, AI Risk Assessment, and other audits end-to-end. Act as the single POC for the global audit team, handling documentation, evidence collection, and compliance reports. Oversee penetration and vulnerability testing, ensuring timely remediation. Monitor compliance across applications, cloud services, and third-party tools. Collaborate with legal, IT, engineering, and product teams to fulfill audit requirements. Establish efficient processes to reduce tech team bandwidth usage while ensuring compliance. Attend meetings in different timezones to understand audit requirements, clear doubts for the team and the auditor, implement processes, analyze requirements and provide solutions, weekly catchups, etc. Work on documentations needed by the compliance team from scratch by going through the reference documentation, collaborating with different stakeholders to understand the present flow and its limitations and bringing up a process which suits the team and also meets the audit needs. Process Automation & Optimization: Identify manual audit tasks and implement automation solutions. Automate compliance documentation, audit tracking, and security approvals. Ensure compliance processes scale as applications and audits increase. Governance & Risk Mitigation: Implement data retention, change management, and access control policies. Collaborate with security, privacy, and compliance teams to onboard new processes. Conduct periodic risk assessments and implement mitigation strategies. Application Portfolio Management (APM) Onboarding: Get onboarded and access applications based on value, performance, cost, and alignment with business goals as per the APM guidelines with respect to privacy, compliance and cyber security. Take ownership of the APM process and its onboarding for the tech team and the new and old application used. Additional Job Description Educational & Professional Qualifications: Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field (B.Tech/B.E. preferred). Certifications (Preferred but not mandatory): CISA, CISM, CISSP, ISO 27001 Lead Auditor/Implementer, or SOC2-related certifications. Technical Skills & Knowledge: Audit & Compliance Expertise: Strong understanding of SOC2, ISO 27001, AI Risk Assessment, GDPR, and other compliance frameworks. Experience managing end-to-end audits, documentation, and compliance reports. Ability to collaborate with auditors, security teams, and global stakeholders. Security & Risk Management: Hands-on experience with penetration testing, vulnerability assessment, and remediation tracking. Familiarity with cloud security compliance (AWS, GCP, Azure). Knowledge of data retention policies, access control, and risk assessment methodologies. Process & Automation: Experience in automating audit workflows, compliance tracking, and documentation. Strong understanding of APM (Application Portfolio Management) and security best practices. Soft Skills: Excellent communication skills to work with cross-functional teams and explain security compliance concepts to non-technical stakeholders. Ability to handle multiple audits simultaneously, ensuring deadlines are met. Problem-solving mindset to enhance security processes while optimizing team bandwidth. Other Requirements: Willingness to work across global time zones for audit coordination. Strong analytical skills to interpret security policies, create documentation, and drive compliance initiatives. This role is ideal for someone who has a blend of security, compliance, and automation expertise, ensuring the organization meets audit and regulatory requirements efficiently. EEO Statement TELUS Digital (TD) Experience partners with the world’s most innovative brands, from tech startups to industry leaders in fintech, gaming, healthcare, and more. We empower businesses to scale and redefine possibilities with integrated customer experience and cutting-edge digital solutions. Backed by TELUS, our multi-billion-dollar parent company, we offer scalable, multi-language, and multi-shore capabilities. Our expertise spans digital transformation, AI-driven consulting, IT lifecycle management, and more – delivered with secure infrastructure, value-driven pricing, and exceptional service. AI Data Solutions: Shaping the Future of AI For nearly two decades, Telus Digital AI Data Solutions has been a global leader in providing premium data services for the ever-evolving AI ecosystem. From machine learning to computer vision and Generative AI (GenAI), we empower the next generation of AI-powered experiences with high-quality data and human intelligence to test, train and improve AI models. Backed by a community of over one million contributors and proprietary AI-driven tools, we deliver solutions designed to cover the training data needs of every project. From custom data collection to advanced data annotation and fine-tuning, our purpose-built tools deliver multimodal data for AI training projects of any complexity – from experimental pilots to ambitious large-scale programs. Examples include empowering GenAI models with human-aligned datasets and fine-tuning data across 20+ domains and 100+ languages, enabling autonomous driving and advancing extended reality applications with industry-leading data labeling.