Information Security Analyst

Role Summary

We are seeking a skilled Information Security Compliance Analyst with technical and

audit experience in cloud environments, application, website security, and operational

processes. This role requires working 75% US hours to coordinate effectively with our

global team.

𝐂𝐨𝐧𝐧𝐞𝐜𝐭 7976457434 𝐬𝐮𝐫𝐞𝐬𝐡.𝐛@𝐬𝐲𝐧𝐚𝐩𝐨𝐧𝐞.𝐜𝐨𝐦

• Maintain relationships with Technology and Business teams

• Conduct control reviews for IT applications, infrastructure, and product releases

• Coordinate between the external auditors and internal stakeholders for evidence

requests. This would include (and not limited to) facilitating meetings, reviewing

evidence and plan remediations

• Review and map policies to internal controls and work with process owners to

ensure procedure documents are maintained

• Monitor regulatory changes and support legal department with compliance

challenges

• Manage compliance and regulatory requests. Plan and coordinate delivery across

teams

• Review information security policies and procedures from compliance standpoint,

suggesting changes as needed

• Facilitate communication across audit levels to achieve goals. Oversee compliance

monitoring and testing

Knowledge, Skills, and Abilities (KSAs):

• Strong written and verbal communication

• Organized, inventive, and detail-oriented problem solver

• Knowledge of security frameworks like NIST, SOC 2, ISO27001 and PCI

• Ability to design and recommend security controls based on industry standards

• Proficiency in testing and validating controls for Identity Access

• Experience with privacy controls and regulations (GDPR, CCPA)

• Vendor risk management for cloud providers (AWS, Azure, GCP)

Experience & Education:

• Minimum of 1-3 years of experience in IT Security compliance.

• Experience with SOC2 and ISO 27001.

• IT compliance assessments for medium-sized companies.

• Essential working hours: 75% US hours to align with global team operations.

• Having any of the relevant certifications like CISA, CISM, CISSP, ISO 27001 Lead

Auditor/Implementer are not a must but would be advantageous