Quick overview
Job description
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Compliance Specialist II based in India .
This role offers the opportunity to strengthen the security and compliance posture of a global technology environment supporting cloud, edge, and web security platforms. You will help assess the effectiveness of security controls, identify risks, and support audits against recognized international standards. Working closely with Information Security, Engineering, DevOps, IT, and business stakeholders, you will translate technical security practices into clear compliance evidence and actionable improvements. Your work will contribute to maintaining robust control frameworks and demonstrating effective safeguards to customers and external auditors. The position combines technical investigation, audit coordination, risk analysis, and process improvement. It is well suited to a detail-oriented professional who enjoys solving complex compliance challenges in a collaborative, remote environment.
Accountabilities
-
Conduct security control testing and evaluations to assess design and operational effectiveness across technical, physical, and organizational controls.
-
Assess controls against industry frameworks and standards, including SOC 2, ISO 27001, and PCI DSS.
-
Coordinate sampling populations and lead technical walkthroughs with Engineering, DevOps, IT, and system owners.
-
Review technical documentation and evidence to verify control implementation and effectiveness.
-
Identify control gaps, assess associated risks, and document exceptions and recurring trends in the Governance, Risk, and Compliance (GRC) platform.
-
Collaborate with system owners and relevant stakeholders to develop practical, actionable remediation plans.
-
Support internal and third-party audits by coordinating evidence collection and explaining technical controls to auditors.
-
Help manage audit activities while minimizing disruption to engineering and business operations.
-
Contribute to improving compliance processes through automation and effective use of GRC tools.
-
Work with Security Compliance colleagues and cross-functional teams to strengthen ongoing compliance operations and security practices.
-
2–6 years of relevant professional experience, supported by equivalent qualifications and applicable experience.
-
Practical experience evaluating security controls against recognized industry standards, particularly SOC 2, ISO 27001, or PCI DSS.
-
Strong understanding of technical security controls, including Identity and Access Management (IAM), Change Management, Vulnerability Management, and Logging and Monitoring.
-
Ability to review technical evidence, identify control weaknesses, assess risks, and support remediation activities.
-
Strong analytical and problem-solving skills, with excellent attention to detail.
-
Effective written and verbal communication skills, including the ability to explain technical controls and compliance requirements to different stakeholders.
-
Ability to collaborate with engineering, infrastructure, IT, and business teams in a cross-functional environment.
-
Nice to have: Relevant security or audit certifications such as CISA, CRISC, Security+, CISM, or ISO Lead Auditor.
-
Nice to have: Experience with cloud infrastructure, containerized environments, or distributed systems.
-
Remote working arrangement in India.
-
Flexible working approach, with the option to work from home, from an office, or through a combination of both, depending on role needs.
-
Benefits supporting employee health, well-being, financial security, and life beyond work.
Requirements:
Benefits:
Similar jobs
- JO

Lead Security EngineerRecently posted Auto Apply
Jobgether · India · Remote 🇮🇳
Stakeholder ManagementMongoDBPHP+26TechnologySalary not listed - JO

Microsoft 365 AI Security EngineerRecently posted Auto Apply
Jobgether · India · Remote 🇮🇳
Microsoft OfficeMFACompliance+5TechnologySalary not listed - JO

Soc AnalystRecently posted Auto Apply
Jobgether · India · Remote 🇮🇳
Continuous ImprovementDNSData Privacy+2TechnologySalary not listed - JO

GRC Engineer IRecently posted Auto Apply
Jobgether · India · Remote 🇮🇳
PCI DSSSOC 2Compliance+4EngineeringSalary not listed - JO

Information Security ConsultantRecently posted Auto Apply
Jobgether · India · Remote 🇮🇳
SOC 2ComplianceData Privacy+4TechnologySalary not listed - JO

GRC LeadRecently posted Auto Apply
Jobgether · India · Remote 🇮🇳
ComplianceContinuous ImprovementData Privacy+4Salary not listed - JO

Incident Response AnalystRecently posted Auto Apply
Jobgether · India · Remote 🇮🇳
Continuous ImprovementData PrivacyGDPRTechnologySalary not listed - JO

Senior Trust EngineerRecently posted Auto Apply
Jobgether · India · Remote 🇮🇳
SOC 2ComplianceData Privacy+3Salary not listed - JO

Security Compliance Specialist IIRecently posted Auto Apply
Jobgether · India · Remote 🇮🇳
Edge ComputingPCI DSSSOC 2+7Salary not listed - JO

Senior Application Security EngineerRecently posted Auto Apply
Jobgether · India · Remote 🇮🇳
GCPGitAWS+19TechnologySalary not listed - JO

Senior Technical Consultant, SecurityRecently posted Auto Apply
Jobgether · India · Remote 🇮🇳
OnboardingActive DirectoryBash+11TechnologySalary not listed - JO

Associate Director, Information SecurityRecently posted Auto Apply
Jobgether · India · Remote 🇮🇳
Stakeholder ManagementMicrosoft OfficeMFA+11Salary not listed