Security Compliance Specialist II

This is a fully remote position, open to applicants in India.

📋 Description

• Perform control testing, identify potential risks, and oversee audits as a Compliance Specialist II.

• Assess the design and operational effectiveness of technical, physical, and security controls.

• Organize sampling populations and lead technical walkthroughs in collaboration with Engineering, DevOps, and IT system owners.

• Conduct thorough reviews of technical evidence.

• Detect control gaps and document exception trends within the GRC platform.

• Work alongside system owners to create actionable remediation plans.

• Assist in third-party audits by coordinating evidence and elucidating technical controls.

• Reduce audit disruptions and enhance compliance processes through automation and GRC tools.

• Partner with Security Compliance team members and business unit stakeholders to improve compliance operations.

⛳️ Requirements

• 2 to 6 years of relevant experience, along with equivalent qualifications and applicable professional background.

• Hands-on experience in assessing security controls against industry standards, particularly SOC 2, ISO 27001, or PCI DSS.

• Proficiency in technical security controls, including Identity & Access Management, Change Management, Vulnerability Management, and Logging/Monitoring.

• Outstanding analytical, problem-solving, and written/verbal communication skills.

• Security or audit certifications such as CISA, CRISC, Security+, CISM, or ISO Lead Auditor are preferred but not mandatory.

• Experience with cloud infrastructure, containerized environments, or distributed systems is beneficial but not essential.

🏝️ Benefits

• Comprehensive benefits supporting employees’ health, well-being, finances, and life beyond work.

• FlexBase flexible workplace program.

• Opportunity to work from home, in an office, or a combination of both.