Information Security Compliance Analyst

About the role

The company is looking for a Compliance and Security Analyst with strong knowledge and hands-on experience in information security. You will handle compliance and security queries from internal teams and external customers, review each request, prepare accurate responses backed by policies and documentation, get CISO approval and share the approved response with the requester.

Key responsibilities

• Receive and review compliance and security queries from internal stakeholders and external customers on documents, policies and services
• Assess each query using information security knowledge so responses reflect the company's security controls and practices
• Research queries and identify the relevant policies, procedures, certifications and supporting evidence
• Draft clear responses, including security questionnaires, due-diligence requests and audit-related queries
• Share approved responses and documents with the requester within agreed timelines
• Maintain a tracker of requests with status, approvals and turnaround times
• Keep security and compliance documentation organized, version-controlled and up to date
• Coordinate with IT, Legal, HR and other teams to gather information and evidence
• Support internal and external audits, assessments and control reviews
• Identify recurring queries and help build a library of standard, pre-approved responses

Required profile

• Bachelor's degree in Information Security, Computer Science, Information Technology or a related field
• 3 to 5 years of experience in IT compliance, information security compliance, GRC or security assurance
• Experience completing customer security questionnaires or supporting audits
• Experience working with international or enterprise clients

Required skills

• Security policies, risk management, security controls and best practices
• Framworks and standards such as ISO 27001, SOC 2, NIST and GDPR
• IT controls: access management, change management, backup and disaster recovery, vulnerability management
• Certifications such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CISM or Security+