Want to know if this job is worth applying to?
India
Remote only
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Compliance Specialist II based in India .
This role offers the opportunity to strengthen the security and compliance posture of a global technology environment supporting cloud, edge, and web security platforms. You will help assess the effectiveness of security controls, identify risks, and support audits against recognized international standards. Working closely with Information Security, Engineering, DevOps, IT, and business stakeholders, you will translate technical security practices into clear compliance evidence and actionable improvements. Your work will contribute to maintaining robust control frameworks and demonstrating effective safeguards to customers and external auditors. The position combines technical investigation, audit coordination, risk analysis, and process improvement. It is well suited to a detail-oriented professional who enjoys solving complex compliance challenges in a collaborative, remote environment.
Conduct security control testing and evaluations to assess design and operational effectiveness across technical, physical, and organizational controls.
Assess controls against industry frameworks and standards, including SOC 2, ISO 27001, and PCI DSS.
Coordinate sampling populations and lead technical walkthroughs with Engineering, DevOps, IT, and system owners.
Review technical documentation and evidence to verify control implementation and effectiveness.
Identify control gaps, assess associated risks, and document exceptions and recurring trends in the Governance, Risk, and Compliance (GRC) platform.
Collaborate with system owners and relevant stakeholders to develop practical, actionable remediation plans.
Support internal and third-party audits by coordinating evidence collection and explaining technical controls to auditors.
Help manage audit activities while minimizing disruption to engineering and business operations.
Contribute to improving compliance processes through automation and effective use of GRC tools.
Work with Security Compliance colleagues and cross-functional teams to strengthen ongoing compliance operations and security practices.
2–6 years of relevant professional experience, supported by equivalent qualifications and applicable experience.
Practical experience evaluating security controls against recognized industry standards, particularly SOC 2, ISO 27001, or PCI DSS.
Strong understanding of technical security controls, including Identity and Access Management (IAM), Change Management, Vulnerability Management, and Logging and Monitoring.
Ability to review technical evidence, identify control weaknesses, assess risks, and support remediation activities.
Strong analytical and problem-solving skills, with excellent attention to detail.
Effective written and verbal communication skills, including the ability to explain technical controls and compliance requirements to different stakeholders.
Ability to collaborate with engineering, infrastructure, IT, and business teams in a cross-functional environment.
Nice to have: Relevant security or audit certifications such as CISA, CRISC, Security+, CISM, or ISO Lead Auditor.
Nice to have: Experience with cloud infrastructure, containerized environments, or distributed systems.
Remote working arrangement in India.
Flexible working approach, with the option to work from home, from an office, or through a combination of both, depending on role needs.
Benefits supporting employee health, well-being, financial security, and life beyond work.