IT Compliance and Security Analyst

Role Summary

We are looking for an IT Compliance and Security Analyst with strong knowledge and hands-on experience in the information security domain. You will manage compliance and security-related queries from internal teams and external customers, review each request, prepare accurate responses supported by our policies and documentation, obtain CISO approval, and share the approved response with the requester.
Key Responsibilities

• Receive and review compliance and security queries from internal stakeholders and external customers related to documents, policies and services
• Apply your information security knowledge to assess each query and confirm that responses accurately reflect our security controls and practices
• Research each query and identify the relevant policies, procedures, certifications and supporting evidence
• Draft clear and accurate responses, including security questionnaires, due-diligence requests and audit-related queries
• Share approved responses and documents with the requester within agreed timelines
• Maintain a tracker of incoming requests with status, approvals and turnaround times
• Keep security and compliance documentation organized, version-controlled and up to date
• Coordinate with IT, Legal, HR and other teams to gather information and evidence
• Support internal and external audits, assessments and control reviews
• Identify recurring queries and help build a library of standard, pre-approved responses

Required Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology or a related field
• 3 to 5 years of experience in IT compliance, information security compliance, GRC or security assurance
• Strong knowledge and practical experience of the information security domain, including security policies, risk management, security controls and security best practices
• Working knowledge of frameworks and standards such as ISO 27001, SOC 2, NIST and GDPR
• Understanding of general IT controls such as access management, change management, backup and disaster recovery, and vulnerability management
• Experience completing customer security questionnaires or supporting audits
• Strong written communication skills, with the ability to explain technical and compliance topics clearly
• Strong attention to detail and good document control practices
• Ability to manage multiple requests and meet deadlines

Preferred Qualifications

• Certifications such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CISM or Security+
• Experience working with international or enterprise clients
• Familiarity with GRC or ticketing tools