It Compliance Analyst

Role & responsibilities

1. Lead and execute ISO 27001, PCI DSS, GDPR, HiTrust (e1, i1, r2) assessments and audits, Conduct Control Testing and Evidence Validation.
2. Prepare and maintain HITRUST workpapers and related documentation in line with required methodologies
3. Ensure timely completion of Internal Security Audits, submit reports, and follow up for closure of findings across functions and delivery projects.
4. Organising documentation and evidence to support internal and external IT audits
5. Acting as the primary liaison between internal and external auditors and technology teams
6. Serving as the single point of contact for audit teams, ensuring consistent responses, evidence, and documentation across applications and audit topics
7. Review and verify IT controls for PCI DSS & ISO 27001, including risk assessments, policy updates, incident analysis, and firewall rule reviews.
8. Drive readiness for external audits (HITRUST (e1, i1, r2), ISO 27001, PCI DSS) and maintain updated policies and procedures annually.
9. Support GRC Activites, prepare executive review PPTs, and respond to client security requirements and RFPs as needed, Conduct Customer Compliance Audits and reviews, Report ISMS Performance Metrics, Conduct Risk Assessments, Risk Reporting and Risk Monitoring.
10. Draft Responses for Client Initiated Security Assessments, Risk Assessments and Audits, and support in successful clearance.

Preferred candidate profile

•  Minimum 4 years of experience in IT Compliance, Information Security, or IT Auditing within enterprise environments
• Hands-on experience with atleast one out of HITRUST CSF assessments (e1, i1, r2), SOC 2 (Trust Services Criteria), OR PCI DSS 4.0.1 QSA Assessment.
• Proven experience working with compliance frameworks and standards such as ISO 27001, PCI DSS, GDPR, NIST.
• Hands-on experience managing cloud security, governance, and compliance requirements across modern technology environments
• Strong experience maintaining audit documentation, controls evidence, and compliance records for internal and external audits
• Demonstrated ability to collaborate with auditors, stakeholders, and cross-functional teams to drive successful compliance and audit outcomes
• Excellent communication skills with fluent English proficienc
• Familiarity with regulatory environments such as HIPAA, PCIDSS, GDPR and other data protection laws.

Perks and benefits

Our benefits and rewards program has been thoughtfully designed to recognize your skills and contributions, elevate your learning/upskilling experience and provide care and support for you and your loved ones. As an Apexon Associate, you get continuous skill-based development, opportunities for career advancement, and access to comprehensive health and well-being benefits and assistance.

We also offer:

• Group Health Insurance covering family of 4
• Term Insurance and Accident Insurance
• Paid Holidays & Earned Leaves
• Paid Parental LeaveoLearning & Career Development
• Employee Wellness