Senior Security & Compliance Analyst
On-sitePune, Maharashtra, India
Job Summary
Coordinate and drive vulnerability remediation activities across Engineering, Cloud Operations, IT, and Product teams to ensure adherence to defined SLAs. Track and report security metrics including MTTR, overdue vulnerabilities, remediation trends, and audit findings to support continuous control monitoring and risk assessments. Proactively follow up and escalate unresolved gaps while responding to customer security due diligence requests, audits, and questionnaires. Support AI governance initiatives by assessing AI-related risks, emerging regulations such as the EU AI Act, and evaluating third-party AI services for compliance. Monitor evolving cybersecurity threats and industry standards to drive continuous improvement in security, risk, and compliance programs.
Required Qualifications
- 6–8 years of experience in Governance, Risk & Compliance (GRC), cybersecurity, information security, or risk management
- Strong understanding of ISO 27001, SOC 1 / SOC 2, GDPR/privacy principles, vulnerability management, and security controls
- Experience in Energy / Utilities sector security and compliance requirements (e.g., CEII or critical infrastructure requirements)
- Experience coordinating vulnerability remediation programs, tracking SLA compliance, MTTR metrics, and executive reporting
- Experience supporting audits, customer security reviews, and compliance programs
- Strong communication, organizational, stakeholder management, and follow-up skills
- Ability to work independently and proactively drive outcomes across distributed teams
Desired Qualifications
- Familiarity with emerging AI governance, privacy, and security frameworks (e.g., ISO 42001, EU AI Act, responsible AI principles) preferred
- CISSP, CISA, ISO 27001 Lead Implementer/Auditor, or similar certifications
- AI governance/privacy certifications are a plus
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.